PoC for code sandboxing

2020-05-26 14:12:12 +02:00
115 changed files with 1225 additions and 1961 deletions
--- a/.env
+++ b/.env
@@ -0,0 +1 @@
+cds.features.snapi = y
--- a/.eslintrc
+++ b/.eslintrc
@@ -21,7 +21,6 @@
    },
    "rules": {
        "no-console": "off",
-        "require-atomic-updates": "off",
-        "require-await":"warn"
+        "require-atomic-updates": "off"
    }
 }
--- a/.github/ISSUE_TEMPLATE/question--feedback-or-bug-.md
+++ b/.github/ISSUE_TEMPLATE/question--feedback-or-bug-.md
@@ -1,10 +0,0 @@
---
-name: This channel is CLOSED. 
-about: Use our community at  https://answers.sap.com/tags/9f13aee1-834c-4105-8e43-ee442775e5ce
-title: ''
-labels: ''
-assignees: ''
-
---
-
-Please use our community on https://answers.sap.com/tags/9f13aee1-834c-4105-8e43-ee442775e5ce
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -16,7 +16,7 @@ jobs:

    strategy:
      matrix:
-        node-version: [12.x, 14.x]
+        node-version: [10.x, 12.16.2]

    steps:
    - uses: actions/checkout@v2
--- a/.npmrc
+++ b/.npmrc
@@ -0,0 +1 @@
+@sap:registry=https://npm.sap.com
--- a/.registry/.gitignore
+++ b/.registry/.gitignore
@@ -1 +0,0 @@
-*.tgz
--- a/.registry/server.js
+++ b/.registry/server.js
@@ -1,71 +0,0 @@
-const { exec } = require ('child_process')
-const express = require ('express')
-const fs = require ('fs')
-const app = express()
-
-const { PORT=4444 } = process.env
-const [,,port=PORT] = process.argv
-process.chdir(__dirname)
-
-app.use('/-/:tarball', (req,res,next) => {
-  console.debug ('GET', req.params)
-  try {
-    const { tarball } = req.params
-    const [, pkg ] = /^capire-(\w+)/.exec(tarball)
-    fs.lstat(tarball,(err => {
-      if (err) exec(`npm pack ../${pkg}`,next)
-      else next()
-    }))
-  } catch (e) {
-    console.error(e)
-    res.sendStatus(500)
-  }
-})
-
-app.use('/-', express.static(__dirname))
-
-app.get('/*', (req,res)=>{
-  const url = decodeURIComponent(req.url)
-  console.debug ('GET',url)
-  try {
-    const [, capire, pkg ] = /^\/(@capire)\/(\w+)/.exec(url)
-    const package = require (`${capire}/${pkg}/package.json`)
-    const tarball = `capire-${pkg}-${package.version}.tgz`
-    // https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md
-    res.json({
-      "name": package.name,
-      "dist-tags": {
-        "latest": package.version
-      },
-      "versions": {
-        [package.version]: {
-          "name": package.name,
-          "version": package.version,
-          "dist": {
-            "tarball": `http://localhost:${port}/-/${tarball}`
-          },
-        }
-      },
-    })
-  } catch (e) {
-    console.error(e)
-    res.sendStatus(404)
-  }
-})
-
-app.listen(port, ()=>{
-  console.log (`npm set @capire:registry=http://localhost:${port}`)
-  console.log (`@capire registry listening on http://localhost:${port}`)
-  exec(`npm set @capire:registry=http://localhost:${port}`)
-})
-
-const _exit = ()=>{
-  console.log ('\nnpm conf rm @capire:registry')
-  exec('npm conf rm @capire:registry')
-  exec('rm *.tgz')
-  process.exit()
-}
-process.on ('SIGTERM',_exit)
-process.on ('SIGHUP',_exit)
-process.on ('SIGINT',_exit)
-process.on ('SIGUSR2',_exit)
--- a/.reuse/dep5
+++ b/.reuse/dep5
@@ -1,29 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: cloud-cap-samples
-Upstream-Contact: <Christian Georgi (christian.georgi@sap.com)>
-Source: https://github.com/SAP-samples/cloud-cap-samples
-Disclaimer: The code in this project may include calls to APIs (“API Calls”) of
- SAP or third-party products or services developed outside of this project
- (“External Products”).
- “APIs” means application programming interfaces, as well as their respective
- specifications and implementing code that allows software to communicate with
- other software.
- API Calls to External Products are not licensed under the open source license
- that governs this project. The use of such API Calls and related External
- Products are subject to applicable additional agreements with the relevant
- provider of the External Products. In no event shall the open source license
- that governs this project grant any rights in or to any External Products,or
- alter, expand or supersede any terms of the applicable additional agreements.
- If you have a valid license agreement with SAP for the use of a particular SAP
- External Product, then you may make use of any API Calls included in this
- project’s code for that SAP External Product, subject to the terms of such
- license agreement. If you do not have a valid license agreement for the use of
- a particular SAP External Product, then you may only make use of any API Calls
- in this project for that SAP External Product for your internal, non-productive
- and non-commercial test and evaluation of such API Calls. Nothing herein grants
- you any rights to use or access any SAP External Product, or provide any third
- parties the right to use of access any SAP External Product, through API Calls.
-
-Files: *
-Copyright: 2019-2020 SAP SE or an SAP affiliate company and cap-cloud-samples
-License: Apache-2.0
--- a/.tours/db-native.tour
+++ b/.tours/db-native.tour
@@ -1,109 +0,0 @@
-{
-  "$schema": "https://aka.ms/codetour-schema",
-  "title": "Database Functions",
-  "steps": [
-    {
-      "title": "Introduction",
-      "description": "### Database Functions in CDS Models\n\nIn this tour, you'll learn how to add database-specific functions to CDS models in your application."
-    },
-    {
-      "file": "bookshop/db/schema.cds",
-      "description": "#### Basic Schema\n\nWe want to add two fields to the `Authors` entity, one for the author's age and one for the span of years that she or he lived.\n\nThese two fields can be computed out of the existing `dateOfBirth` and `dateOfDeath` fields.",
-      "selection": {
-        "start": {
-          "line": 19,
-          "character": 1
-        },
-        "end": {
-          "line": 21,
-          "character": 1
-        }
-      },
-      "title": "Base fields in Author"
-    },
-    {
-      "file": "bookshop/srv/admin-service.cds",
-      "description": "This is how the `Authors` entity gets exposed in an OData or REST service.\n\nIn the next step, you'll see how we extend this projection.",
-      "selection": {
-        "start": {
-          "line": 4,
-          "character": 1
-        },
-        "end": {
-          "line": 5,
-          "character": 1
-        }
-      },
-      "title": "Authors service"
-    },
-    {
-      "file": "fiori/db/sqlite/index.cds",
-      "description": "#### SQLite Implementation\n\nHere's the first implementation for SQLite.  It computes the two fields `age` and `lifetime` through SQLite's [strftime](https://sqlite.org/lang_datefunc.html) function.\n\nThrough the [`extend projection`](https://cap.cloud.sap/docs/cds/cdl#extend-view) clause you can add additional fields to projection entities.  These are deployed as database views, which is why we can integrate the database functions in the first place.\n",
-      "selection": {
-        "start": {
-          "line": 7,
-          "character": 1
-        },
-        "end": {
-          "line": 11,
-          "character": 1
-        }
-      },
-      "title": "SQLite implementation"
-    },
-    {
-      "file": "fiori/db/hana/index.cds",
-      "description": "#### SAP HANA Implementation\n\nThis is the second implementation for SAP HANA.  It computes the same two fields `age` and `lifetime` through the [YEARS_BETWEEN](https://help.sap.com/viewer/7c78579ce9b14a669c1f3295b0d8ca16/Cloud/en-US/7c0d2c161ea34def86de3f5eadd6a0af.html) and [YEAR](https://help.sap.com/viewer/7c78579ce9b14a669c1f3295b0d8ca16/Cloud/en-US/20f5fac6751910148dabd3c6821f907d.html) functions of SAP HANA.\n\n#### File Layout and Code Structure\n\nNote the path of the `.cds` file we are in: it's in a subfolder of `db`, so that it's _not_ automatically picked up when we start the application.  The same is true for the SQLite implementation: it's in a separate `db/sqlite/` folder as well.  In the next step, you'll see how these files are loaded.\n\nAlso, we choose to implement all of that as an extension of the original bookshop here in the _fiori_ package.  See the first [CAP Samples] code tour for more details on the different packages of this repository.",
-      "selection": {
-        "start": {
-          "line": 7,
-          "character": 1
-        },
-        "end": {
-          "line": 11,
-          "character": 1
-        }
-      },
-      "title": "SAP HANA implementation"
-    },
-    {
-      "file": "fiori/package.json",
-      "description": "#### Configuration\n\nThe `cds` section in `package.json` is a place to configure which of the `db/sqlite` and `db/hana` folders are used for which database.\nWe use [Node.js profiles](https://cap.cloud.sap/docs/node.js/cds-env#profiles) to separate the configuration.\nIn the `development` profile, you can see that `db/sqlite` is set as the model, while the `db/hana` folder is configured in the `production` profile.",
-      "line": 17,
-      "title": "Configuration"
-    },
-    {
-      "file": "fiori/package.json",
-      "description": "#### Run with SQLite\n\nTo run with `development` and an in-memory SQLite database, you don't need to do anything special, because it's activated by default.  Just run:\n\n>> cds watch fiori\n\nThen open [http://localhost:4004/admin/Authors](http://localhost:4004/admin/Authors) to see the two new fields.\n",
-      "line": 28,
-      "title": "Run with SQLite"
-    },
-    {
-      "file": "fiori/package.json",
-      "description": "#### Deploy the CDS Model to SAP HANA\n\nTo 'activate' SAP HANA through the `production` profile, you can use the global `--production` flag:\n\n>> cd fiori; cds deploy --to hana --production\n\n[Learn more about SAP HANA deployment](https://cap.cloud.sap/docs/guides/databases#get-hana)\n\n#### Run the Application\n\n>> cd fiori; cds watch --production\n\nThe service on [http://localhost:4004/admin/Authors](http://localhost:4004/admin/Authors) is the same as before, but this time the `Authors` entity is backed by a database view with an SAP HANA function.\n\n#### More\n\nIf you don't see data, you can add some in the next step.",
-      "line": 31,
-      "title": "Run with SAP HANA"
-    },
-    {
-      "file": "fiori/test/requests.http",
-      "description": "### Add More Data\n\nOptionally you can add some `Authors` data by clicking on the _Send Request_ link (provided by the [REST client](https://marketplace.visualstudio.com/items?itemName=humao.rest-client) extension).",
-      "line": 68,
-      "selection": {
-        "start": {
-          "line": 67,
-          "character": 1
-        },
-        "end": {
-          "line": 73,
-          "character": 1
-        }
-      },
-      "title": "Add Data"
-    },
-    {
-      "title": "Wrap-up",
-      "description": "### Summary\n\nThat's it!  You have seen: \n- How to integrate database-specific functions in a CDS model.\n- How to switch between the two implementations for SQLite and SAP HANA."
-    }
-  ],
-  "ref": "master"
-}
--- a/.tours/samples.tour
+++ b/.tours/samples.tour
@@ -1,136 +0,0 @@
-{
-  "$schema": "https://aka.ms/codetour-schema",
-  "title": "CAP Samples",
-  "steps": [
-    {
-      "title": "Welcome",
-      "file": "README.md",
-      "description": "### Welcome to CAP Samples!\n\nThis tour leads you through a collection of samples for the [SAP Cloud Application Programming Model (CAP)](https://cap.cloud.sap).\nYou will learn which features of the programming model are demonstrated in which sample.\n\nLet's start!",
-      "line": 2,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 3,
-          "character": 108
-        }
-      }
-    },
-    {
-      "file": "hello/world.cds",
-      "description": "### Hello World!\n\nThis is a simplistic [Hello World](https://cap.cloud.sap/docs/get-started/hello-world) service using [CDS](https://cap.cloud.sap/docs/cds/) and [cds.services](https://cap.cloud.sap/docs/node.js/api#services-api).",
-      "line": 2,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 4,
-          "character": 1
-        }
-      },
-      "title": "Hello World!"
-    },
-    {
-      "file": "bookshop/db/schema.cds",
-      "description": "### A Bookshop!\n\nIntroduces:\n- [Project Setup](https://cap.cloud.sap/docs/get-started/) and [Layouts](https://cap.cloud.sap/docs/get-started/projects)\n- [Domain Modeling](https://cap.cloud.sap/docs/guides/domain-models)\n- [Defining Services](https://cap.cloud.sap/docs/guides/providing-services)\n- [Generic Providers](https://cap.cloud.sap/docs/guides/generic-providers)\n- [Adding Custom Logic](https://cap.cloud.sap/docs/guides/service-impl)\n- [Using Databases](https://cap.cloud.sap/docs/guides/databases)\n",
-      "line": 1,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 32,
-          "character": 1
-        }
-      },
-      "title": "Bookshop"
-    },
-    {
-      "file": "common/index.cds",
-      "description": "### Extend and Reuse\n\nShowcases how to extend [@sap/cds/common](https://cap.cloud.sap/docs/cds/common) thereby covering:\n- Building [extension packages](https://cap.cloud.sap/docs/guides/domain-models#aspects-extensibility)\n- Providing [reuse packages](https://cap.cloud.sap/docs/get-started/projects#sharing-and-reusing-content)\n- [Verticalization](https://cap.cloud.sap/docs/cds/common#adapting-to-your-needs)\n- Using [Aspects](https://cap.cloud.sap/docs/cds/cdl#aspects)\n- Used in the [fiori app sample](#fiori)\n",
-      "line": 1,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 46,
-          "character": 1
-        }
-      },
-      "title": "Common"
-    },
-    {
-      "file": "orders/db/schema.cds",
-      "description": "### Compositions and Serving Documents\n\nA standalone orders management service, demonstrating:\n- Using [Compositions](https://cap.cloud.sap/docs/cds/cdl#compositions) in [Domain Models](https://cap.cloud.sap/docs/guides/domain-models), along with\n- [Serving deeply nested documents](https://cap.cloud.sap/docs/guides/generic-providers#serving-structured-data)\n",
-      "line": 1,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 27,
-          "character": 1
-        }
-      },
-      "title": "Orders"
-    },
-    {
-      "file": "reviews/db/schema.cds",
-      "description": "### More Modularity\n\nShows how to implement a modular service to manage product reviews, including:\n- Consuming other services synchronously and asynchronously\n- Serving requests synchronously\n- Emitting events asynchronously\n- Grow as you go, with:\n- Mocking app services\n- Running service meshes\n- Late-cut Micro Services\n- As well as managed data, input validations, and authorization\n",
-      "line": 1,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 39,
-          "character": 1
-        }
-      },
-      "title": "Reviews"
-    },
-    {
-      "file": "fiori/app/index.cds",
-      "description": "### Annotations for SAP Fiori Elements\n\nA [composite app, reusing and combining](https://cap.cloud.sap/docs/guides/verticalize) these packages:\n  - [@capire/bookshop](bookshop)\n  - [@capire/reviews](reviews)\n  - [@capire/orders](orders)\n  - [@capire/common](common)\n\n[Adds a SAP Fiori elements application](https://cap.cloud.sap/docs/guides/fiori/) to bookshop, thereby introducing to:\n  - [OData Annotations](https://cap.cloud.sap/docs/guides/fiori#adding-odata-annotations) in `.cds` files\n  - Support for [Fiori Draft](https://cap.cloud.sap/docs/guides/fiori#draft)\n  - Support for [Value Helps](https://cap.cloud.sap/docs/guides/fiori#value-help)\n  - Serving SAP Fiori apps locally\n\n[The Vue.js app](bookshop/app/vue) imported from bookshop is served as well.\n",
-      "line": 1,
-      "selection": {
-        "start": {
-          "line": 1,
-          "character": 1
-        },
-        "end": {
-          "line": 13,
-          "character": 1
-        }
-      },
-      "title": "Fiori"
-    },
-    {
-      "file": "package.json",
-      "description": "### All-in-one Monorepo\n\nEach sample sub directory essentially is a standard npm package, some with standard npm dependencies to other samples. The root folder's [package.json](package.json) has local links to the sub folders, such that an `npm install` populates a local `node_modules` folder acts like a local npm registry to the individual sample packages.\n",
-      "line": 8,
-      "selection": {
-        "start": {
-          "line": 8,
-          "character": 1
-        },
-        "end": {
-          "line": 15,
-          "character": 1
-        }
-      },
-      "title": "Packages"
-    }
-  ],
-  "isPrimary": true,
-  "description": "Overview of CAP Samples for Node.js"
-}
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -4,15 +4,14 @@

 	// List of extensions which should be recommended for users of this workspace.
 	"recommendations": [
-		"sapse.vscode-cds",
+		// "CDS Editor !",
 		"dbaeumer.vscode-eslint",
 		"esbenp.prettier-vscode",
 		"mechatroner.rainbow-csv",
 		"humao.rest-client",
 		"alexcvzz.vscode-sqlite",
 		"hbenl.vscode-mocha-test-adapter",
-		"sdras.night-owl",
-		"vsls-contrib.codetour"
+		"sdras.night-owl"
 	],
 	// List of extensions recommended by VS Code that should not be recommended for users of this workspace.
 	"unwantedRecommendations": [
--- a/.vscode/launch.json
+++ b/.vscode/launch.json
@@ -6,29 +6,25 @@
  "configurations": [
    {
      "name": "bookshop",
-      "command": "npx cds watch bookshop",
-      "type": "node-terminal",
+      "cwd": "${workspaceFolder}/bookshop",
      "request": "launch",
-      "skipFiles": [
-        "<node_internals>/**",
-        "**/node_modules/**",
-        "**/cds/lib/lazy.js",
-        "**/cds/lib/req/cls.js",
-        "**/odata-v4/okra/**"
-      ]
+      "type": "node",
+      "runtimeExecutable": "npx",
+      "runtimeArgs": ["-n"],
+      "args": ["--", "cds", "run", "--with-mocks", "--in-memory?"],
+      "console": "integratedTerminal",
+      "skipFiles": ["<node_internals>/**"]
    },
    {
      "name": "Fiori App",
-      "command": "npx cds watch fiori",
-      "type": "node-terminal",
+      "cwd": "${workspaceFolder}/fiori",
      "request": "launch",
-      "skipFiles": [
-        "<node_internals>/**",
-        "**/node_modules/**",
-        "**/cds/lib/lazy.js",
-        "**/cds/lib/req/cls.js",
-        "**/odata-v4/okra/**"
-      ]
+      "type": "node",
+      "runtimeExecutable": "npx",
+      "runtimeArgs": ["-n"],
+      "args": ["--", "cds", "run", "--with-mocks", "--in-memory?"],
+      "console": "integratedTerminal",
+      "skipFiles": ["<node_internals>/**"]
    }
  ],
  "inputs": [
@@ -36,7 +32,7 @@
      "type": "pickString",
      "id": "sample",
      "description": "Which sample do you want to start?",
-      "options": [ "bookshop", "fiori", "reviews", "reviews" ],
+      "options": ["bookshop", "fiori", "reviews", "reviews/test/bookshop"],
      "default": "bookshop"
    }
  ]
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -1,17 +1,6 @@
 {
  "files.exclude": {
-    ".reuse/**": true,
    "**/.gitignore": true,
-    "**/.vscode": true,
-    "LICENSES/**": true
-  },
-  "debug.javascript.terminalOptions": {
-    "skipFiles": [
-      "<node_internals>/**",
-      "**/node_modules/**",
-      "**/cds/lib/lazy.js",
-      "**/cds/lib/req/cls.js",
-      "**/odata-v4/okra/**"
-    ]
-  },
+    "**/.vscode": true
+  }
 }
--- a/LICENSE.txt
+++ b/LICENSE.txt
@@ -1,201 +1,217 @@
-                                  Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright [yyyy] [name of copyright owner]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+                                  Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+--------------------------------------------------------------------------------------------------------------------------
+APIs
+
+This project may include APIs to SAP or third-party products or services.
+The use of these APIs, products and services may be subject to additional
+agreements. In no event shall the application of the Apache Software
+License, v.2 to this project grant any rights in or to these APIs,
+products or services that would alter, expand, be inconsistent with,
+or supersede any terms of these additional agreements. “API” means
+application programming interfaces, as well as their respective
+specifications and implementing code that allows other software
+products to communicate with or call on SAP or third party products
+or services (for example, SAP Enterprise Services, BAPIs, Idocs, RFCs
+and ABAP calls or other user exits) and may be made available through
+SAP or third party products, SDKs, documentation or other media.
--- a/README.md
+++ b/README.md
@@ -3,21 +3,17 @@
 Find here a collection of samples for the [SAP Cloud Application Programming Model](https://cap.cloud.sap) organized in a simplistic [monorepo setup](samples.md#all-in-one-monorepo). &rarr; See [**Overview** of contained samples](samples.md)

 ![](https://github.com/SAP-samples/cloud-cap-samples/workflows/CI/badge.svg)
-[![REUSE status](https://api.reuse.software/badge/github.com/SAP-samples/cloud-cap-samples)](https://api.reuse.software/info/github.com/SAP-samples/cloud-cap-samples)

 ### Preliminaries

-1. Install [**@sap/cds-dk**](https://cap.cloud.sap/docs/get-started/) globally:
+1. [Install @sap/cds-dk](https://cap.cloud.sap/docs/get-started/) as documented in [capire](https://cap.cloud.sap)
+2. _Optional:_ [Use Visual Studio Code](https://cap.cloud.sap/docs/get-started/in-vscode)

-   ```sh
-   npm i -g @sap/cds-dk
-   ```
-
-2. _Optional:_ [Use Visual Studio Code](https://cap.cloud.sap/docs/get-started/tools#vscode)

 ### Download

-If you've [Git](https://git-scm.com/downloads) installed, clone this repo as shown below, otherwise [download as ZIP file](archive/master.zip).
+Clone this repo as shown below, if you have [git](https://git-scm.com/downloads) installed,
+otherwise [download as zip file](archive/master.zip).

 ```sh
 git clone https://github.com/sap-samples/cloud-cap-samples samples
@@ -42,45 +38,21 @@ cds watch bookshop

 After that open this link in your browser: [http://localhost:4004](http://localhost:4004)

-When asked to log in, type `alice` as user and leave the password field blank, which is the [default user](https://cap.cloud.sap/docs/node.js/authentication#mocked).
-
 ### Testing

 Run the provided tests with [_jest_](http://jestjs.io) or [_mocha_](http://mochajs.org), for example:
-
 ```sh
 npx jest
 ```
 > While mocha is a bit smaller and faster, jest runs tests in parallel and isolation, which allows to run all tests.


-### Serve `npm`
-
-We've included a simple npm registry mock, which allows you to do an `npm install @capire/<package>` locally. Use it as follows:
-
-1. Start the @capire registry:
-```sh
-npm run registry
-```
-> While running this will have `@capire:registry=http://localhost:4444` set with npmrc.
-
-2. Install one of the @capire packages wherever you like, for example:
-
-```sh
-npm add @capire/common @capire/bookshop
-```
-
-
-## Code Tours
-
-Take one of the [guided tours](.tours) in VS Code through our CAP samples and learn which CAP features are showcased by the different parts of the repository. Just install the [CodeTour extension](https://marketplace.visualstudio.com/items?itemName=vsls-contrib.codetour) for VS Code. We'll add more code tours in the future. Stay tuned!
-
 ## Get Support

 Check out the documentation at [https://cap.cloud.sap](https://cap.cloud.sap). <br>
-In case you've a question, find a bug, or otherwise need support, use our [community](https://answers.sap.com/tags/9f13aee1-834c-4105-8e43-ee442775e5ce) to get more visibility.
+In case you find a bug or need support, please [open an issue in here](https://github.com/SAP-samples/cloud-cap-samples/issues/new).


 ## License

-Copyright (c) 2021 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, version 2.0 except as noted otherwise in the [LICENSE](LICENSE.txt) file.
+Copyright (c) 2020 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, version 2.0 except as noted otherwise in the [LICENSE](/LICENSE) file.
--- a/bookshop/.env
+++ b/bookshop/.env
@@ -0,0 +1 @@
+cds.features.snapi = y
--- a/bookshop/app/vue/app.js
+++ b/bookshop/app/vue/app.js
@@ -9,36 +9,33 @@ const books = new Vue ({

    data: {
        list: [],
-        book: undefined,
+        book: { descr:'( click on a row to see details... )' },
        order: { amount:1, succeeded:'', failed:'' }
    },

    methods: {

-        search: ({target:{value:v}}) => books.fetch(v && '&$search='+v),
+        search: ({target:{value:v}}) => books.fetch (v && '$search='+v),

-        async fetch (etc='') {
-            const {data} = await GET(`/ListOfBooks?$expand=genre,currency${etc}`)
+        async fetch (_filter='') {
+            const columns = 'ID,title,author,price,stock', details = 'genre,currency'
+            const {data} = await GET(`/Books?$select=${columns}&$expand=${details}&${_filter}`)
            books.list = data.value
        },

-        async inspect (eve) {
-            const book = books.book = books.list [eve.currentTarget.rowIndex-1]
-            const res = await GET(`/Books/${book.ID}?$select=descr,stock,image`)
-            Object.assign (book, res.data)
+        async inspect () {
+            const book = books.book = books.list [event.currentTarget.rowIndex-1]
+            book.descr || await GET(`/Books/${book.ID}/descr/$value`) .then (({data}) => book.descr = data)
            books.order = { amount:1 }
            setTimeout (()=> $('form > input').focus(), 111)
        },

-        async submitOrder () {
-            const {book,order} = books, amount = parseInt (order.amount) || 1 // REVISIT: Okra should be less strict
-            try {
-                const res = await POST(`/submitOrder`, { amount, book: book.ID })
-                book.stock = res.data.stock
-                books.order = { amount, succeeded: `Successfully orderd ${amount} item(s).` }
-            } catch (e) {
-                books.order = { amount, failed: e.response.data.error.message }
-            }
+        submitOrder () { event.preventDefault()
+            const {book,order} = books, amount = parseInt (order.amount) || 1
+            POST(`/submitOrder`, { amount, book: book.ID })
+            .then (()=> books.order = { amount, succeeded: `Successfully orderd ${amount} item(s).` })
+            .catch (e=> books.order = { amount, failed: e.response.data.error.message })
+            GET(`/Books/${book.ID}/stock/$value`).then (res => book.stock = res.data)
        }

    }
--- a/bookshop/app/vue/index.html
+++ b/bookshop/app/vue/index.html
@@ -7,57 +7,51 @@
    <script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/vue"></script>
    <style>
-        .hovering tr:hover td { color:cyan; background: #123; cursor: pointer; }
-        .rating-stars { color:teal }
-        .succeeded { color:teal }
-        .failed { color:red }
+        #books tr:hover { background: #f2f2f2; cursor: pointer; }
+        form { float:right; display:flex; flex-direction: row-reverse }
+        form #amount { width: 5em }
+        .is-success { color: #0d920d }
+        .has-error { color: #df1010 }
    </style>
 </head>

 <body class="small-container", style="margin-top: 70px;">
 <div id='app'>

-    <h1> {{ document.title }} </h1>
+    <h1> Capire Books </h1>

    <input type="text" placeholder="Search..." @input="search">

-    <table id='books' class="hovering">
+    <table id='books'>
        <thead>
            <th> Book </th>
            <th> Author </th>
            <th> Genre </th>
-            <th> Rating </th>
            <th> Price </th>
        </thead>
        <tr v-for="book in list" v-bind:id="book.ID" v-on:click="inspect">
            <td>{{ book.title }}</td>
            <td>{{ book.author }}</td>
            <td>{{ book.genre.name }}</td>
-            <td class="rating-stars">
-                {{ ('★'.repeat(Math.round(book.rating))+'☆☆☆☆☆').slice(0,5) }}
-            </td>
-            <td>{{ book.currency && book.currency.symbol }} {{ book.price }}</td>
+            <td>{{ book.currency.symbol }} {{ book.price }}</td>
        </tr>
    </table>

-    <div v-if="book">
-        <img v-bind:src="book.image" alt=""/>
+    <div v-if="book.title">
        <label style="text-align:right">
-            <span class="succeeded"> {{ order.succeeded }} </span>
-            <span class="failed"> {{ order.failed }} </span>
+            <span class="is-success"> {{ order.succeeded }} </span>
+            <span class="has-error"> {{ order.failed }} </span>
            &nbsp;&nbsp; {{ book.stock }} in stock
        </label>
-        <form @submit.prevent="submitOrder" style="float:right; display:flex; flex-direction:row-reverse">
-            <input type="number" v-model="order.amount" v-bind:class="{ failed: order.failed }" style="width:5em">
+        <form @submit="submitOrder">
+            <input type="number" id="amount" v-model="order.amount" v-bind:class="{ 'has-error': order.failed }">
            <input type="submit" value="Order:" class="muted-button">
        </form>
-        <h4> {{ book.title }} </h4>
-        <p> {{ book.descr }} </p>
-    </div>
-    <div v-else>
-        ( click on a row to see details... )
    </div>

+    <h4> {{ book.title }} </h4>
+    <p> {{ book.descr }} </p>
+
 </div>
 </body>

--- a/bookshop/db/data/sap.capire.bookshop-Authors.csv
+++ b/bookshop/db/data/sap.capire.bookshop-Authors.csv
@@ -1,5 +1,5 @@
-ID;name
-101;Emily Brontë
-107;Charlotte Brontë
-150;Edgar Allen Poe
-170;Richard Carpenter
+ID;name;dateOfBirth;placeOfBirth;dateOfDeath;placeOfDeath
+101;Emily Brontë;1818-07-30;Thornton, Yorkshire;1848-12-19;Haworth, Yorkshire
+107;Charlotte Brontë;1818-04-21;Thornton, Yorkshire;1855-03-31;Haworth, Yorkshire
+150;Edgar Allen Poe;1809-01-19;Boston, Massachusetts;1849-10-07;Baltimore, Maryland
+170;Richard Carpenter;1929-08-14;King’s Lynn, Norfolk;2012-02-26;Hertfordshire, England
--- a/bookshop/db/data/sap.capire.bookshop-Books.csv
+++ b/bookshop/db/data/sap.capire.bookshop-Books.csv
@@ -1,6 +1,6 @@
-ID;title;author_ID;genre_ID
-201;Wuthering Heights;101;11
-207;Jane Eyre;107;11
-251;The Raven;150;16
-252;Eleonora;150;16
-271;Catweazle;170;13
+ID;title;descr;author_ID;stock;price;currency_code;genre_ID
+201;Wuthering Heights;"Wuthering Heights, Emily Brontë's only novel, was published in 1847 under the pseudonym ""Ellis Bell"". It was written between October 1845 and June 1846. Wuthering Heights and Anne Brontë's Agnes Grey were accepted by publisher Thomas Newby before the success of their sister Charlotte's novel Jane Eyre. After Emily's death, Charlotte edited the manuscript of Wuthering Heights and arranged for the edited version to be published as a posthumous second edition in 1850.";101;12;11.11;GBP;11
+207;Jane Eyre;"Jane Eyre /ɛər/ (originally published as Jane Eyre: An Autobiography) is a novel by English writer Charlotte Brontë, published under the pen name ""Currer Bell"", on 16 October 1847, by Smith, Elder & Co. of London. The first American edition was published the following year by Harper & Brothers of New York. Primarily a bildungsroman, Jane Eyre follows the experiences of its eponymous heroine, including her growth to adulthood and her love for Mr. Rochester, the brooding master of Thornfield Hall. The novel revolutionised prose fiction in that the focus on Jane's moral and spiritual development is told through an intimate, first-person narrative, where actions and events are coloured by a psychological intensity. The book contains elements of social criticism, with a strong sense of Christian morality at its core and is considered by many to be ahead of its time because of Jane's individualistic character and how the novel approaches the topics of class, sexuality, religion and feminism.";107;11;12.34;GBP;11
+251;The Raven;"""The Raven"" is a narrative poem by American writer Edgar Allan Poe. First published in January 1845, the poem is often noted for its musicality, stylized language, and supernatural atmosphere. It tells of a talking raven's mysterious visit to a distraught lover, tracing the man's slow fall into madness. The lover, often identified as being a student, is lamenting the loss of his love, Lenore. Sitting on a bust of Pallas, the raven seems to further distress the protagonist with its constant repetition of the word ""Nevermore"". The poem makes use of folk, mythological, religious, and classical references.";150;333;13.13;USD;16
+252;Eleonora;"""Eleonora"" is a short story by Edgar Allan Poe, first published in 1842 in Philadelphia in the literary annual The Gift. It is often regarded as somewhat autobiographical and has a relatively ""happy"" ending.";150;555;14;USD;16
+271;Catweazle;Catweazle is a British fantasy television series, starring Geoffrey Bayldon in the title role, and created by Richard Carpenter for London Weekend Television. The first series, produced and directed by Quentin Lawrence, was screened in the UK on ITV in 1970. The second series, directed by David Reid and David Lane, was shown in 1971. Each series had thirteen episodes, most but not all written by Carpenter, who also published two books based on the scripts.;170;22;15;EUR;13
--- a/bookshop/db/data/sap.capire.bookshop-Books_texts.csv
+++ b/bookshop/db/data/sap.capire.bookshop-Books_texts.csv
@@ -1,5 +1,5 @@
-ID;locale;title
-201;de;Sturmhöhe
-201;fr;Les Hauts de Hurlevent
-207;de;Jane Eyre
-252;de;Eleonora
+ID;locale;title;descr
+201;de;Sturmhöhe;Sturmhöhe (Originaltitel: Wuthering Heights) ist der einzige Roman der englischen Schriftstellerin Emily Brontë (1818–1848). Der 1847 unter dem Pseudonym Ellis Bell veröffentlichte Roman wurde vom viktorianischen Publikum weitgehend abgelehnt, heute gilt er als ein Klassiker der britischen Romanliteratur des 19. Jahrhunderts.
+201;fr;Les Hauts de Hurlevent;Les Hauts de Hurlevent (titre original : Wuthering Heights), parfois orthographié Les Hauts de Hurle-Vent, est l'unique roman d'Emily Brontë, publié pour la première fois en 1847 sous le pseudonyme d’Ellis Bell. Loin d'être un récit moralisateur, Emily Brontë achève néanmoins le roman dans une atmosphère sereine, suggérant le triomphe de la paix et du Bien sur la vengeance et le Mal.
+207;de;Jane Eyre;Jane Eyre. Eine Autobiographie (Originaltitel: Jane Eyre. An Autobiography), erstmals erschienen im Jahr 1847 unter dem Pseudonym Currer Bell, ist der erste veröffentlichte Roman der britischen Autorin Charlotte Brontë und ein Klassiker der viktorianischen Romanliteratur des 19. Jahrhunderts. Der Roman erzählt in Form einer Ich-Erzählung die Lebensgeschichte von Jane Eyre (ausgesprochen /ˌdʒeɪn ˈɛə/), die nach einer schweren Kindheit eine Stelle als Gouvernante annimmt und sich in ihren Arbeitgeber verliebt, jedoch immer wieder um ihre Freiheit und Selbstbestimmung kämpfen muss. Als klein, dünn, blass, stets schlicht dunkel gekleidet und mit strengem Mittelscheitel beschrieben, gilt die Heldin des Romans Jane Eyre nicht zuletzt aufgrund der Kino- und Fernsehversionen der melodramatischen Romanvorlage als die bekannteste englische Gouvernante der Literaturgeschichte
+252;de;Eleonora;“Eleonora” ist eine Erzählung von Edgar Allan Poe. Sie wurde 1841 erstveröffentlicht. In ihr geht es um das Paradox der Treue in der Treulosigkeit.
--- a/bookshop/db/data/sap.capire.bookshop-Genres.csv
+++ b/bookshop/db/data/sap.capire.bookshop-Genres.csv
@@ -11,11 +11,6 @@ ID;parent_ID;name
 19;10;Fairy Tale
 20;;Non-Fiction
 21;20;Biography
-22;21;Autobiography
+22;20;Autobiography
 23;20;Essay
 24;20;Speech
-30;;Others
-31;30;Other-A
-32;30;Other-A
-33;30;Other-A
-34;30;Other-A
--- a/bookshop/db/schema.cds
+++ b/bookshop/db/schema.cds
@@ -1,19 +1,28 @@
 using { Currency, managed, sap } from '@sap/cds/common';
 namespace sap.capire.bookshop;

-entity Books {
+entity Books : managed {
  key ID : Integer;
  title  : localized String(111);
+  descr  : localized String(1111);
  author : Association to Authors;
  genre  : Association to Genres;
+  stock  : Integer;
+  price  : Decimal(9,2);
+  currency : Currency;
 }

-entity Authors {
+entity Authors : managed {
  key ID : Integer;
  name   : String(111);
+  dateOfBirth  : Date;
+  dateOfDeath  : Date;
+  placeOfBirth : String;
+  placeOfDeath : String;
  books  : Association to many Books on books.author = $self;
 }

+/** Hierarchically organized Code List for Genres */
 entity Genres : sap.common.CodeList {
  key ID   : Integer;
  parent   : Association to Genres;
--- a/bookshop/index.cds
+++ b/bookshop/index.cds
@@ -1,3 +1,4 @@
 namespace sap.capire.bookshop; //> important for reflection
 using from './db/schema';
+using from './srv/cat-service';
 using from './srv/admin-service';
--- a/bookshop/index.js
+++ b/bookshop/index.js
@@ -0,0 +1 @@
+exports.CatalogService = require('./srv/cat-service')
--- a/bookshop/package.json
+++ b/bookshop/package.json
@@ -3,42 +3,19 @@
  "version": "1.0.0",
  "description": "A simple self-contained bookshop service.",
  "dependencies": {
-    "@sap/cds": "^5.0.4",
-    "express": "^4.17.1",
-    "passport": "0.4.1",
-    "@sap/hana-client": "^2.7.21"
+    "@capire/common": "../common",
+    "@sap/cds": ">=3.33.1",
+    "express": "^4.17.1"
  },
  "scripts": {
+    "genres": "cds serve test/genres.cds",
+    "start": "cds run",
    "watch": "cds watch"
  },
  "cds": {
    "requires": {
      "db": {
-        "kind": "sql",
-        "xxx-model": "*",
-        "xxx-credentials": {
-            "database": "localSqlite.db"
-        }
-      },
-      "[production]": {
-          "db": {
-              "kind": "hana",
-              "model": [
-                  "db",
-                  "srv"
-              ]
-          }
-      }
-    },
-    "features": {
-      "assert_integrity": false
-    },
-    "hana": {
-        "deploy-format": "hdbtable"
-    },
-    "cdsc": {
-      "beta": {
-        "foreignKeyConstraints": true
+        "kind": "sql"
      }
    }
  }
--- a/bookshop/readme.md
+++ b/bookshop/readme.md
@@ -1,126 +1,31 @@
-# Foreign key constraints on DB
+# Bookshop Getting Started Sample

-As model we use a simplified version of the bookshop scenario, we work with nodejs runtime.
+This stand-alone sample introduces the essential tasks in the development of CAP-based services as also covered in the [Getting Started guide in capire](https://cap.cloud.sap/docs/get-started/in-a-nutshell).

+## Hypothetical Use Cases

-## Preparation
+1. Build a service that allows to browse _Books_ and _Authors_.
+2. Books have assigned _Genres_ which are organized hierarchically.
+3. All users may browse books without login.
+4. All entries are maintained by Administrators.
+5. End users may order books (the actual order mgmt being out of scope)

-As we want to see the effects of the database constaints, we first need to switch off the integrity checks done by the node runtime. In the `package.json`:
-```json
-"cds": {
-  ...,
-  "features": {
-    "assert_integrity": false
-  }
-}
+## Running the Sample
+
+```sh
+npm run watch
 ```

-Then switch on constraint generation. In the `package.json`:
-```json
-"cds": {
-  ...,
-  "cdsc": {
-    "beta": {
-      "foreignKeyConstraints": true
-    }
-  }
-}
-```
+## Content & Best Practices

-## SQLite
-
-In SQLite, FK constraints can only be specified during the creation of a table. They cannot be altered for an existing table. So here we at least don't have issues with existing data.
-
-For SQLite, constraint checks need to be enabled by application at runtime for each db connection with the command
-```sql
-PRAGMA foreign_keys = ON;
-```
-We do this via a custom handler in `admin-service.js`.
-
-Now run the requests in `requests.http` (use `http://localhost:4004` as server URL). They behave as expected.
-
-But the error messages are not providing any details. They say "constraint violation", but they don't say which table/constraint is violated:
-```
-HTTP/1.1 500 Internal Server Error
-...
-{
-  "error": {
-    "code": "SQLITE_CONSTRAINT",
-    "message": "SQLITE_CONSTRAINT: FOREIGN KEY constraint failed in: \nCOMMIT"
-  }
-}
-```
-
-The runtime constraint checks do provide the name of the restricting association (but not the name of the entity where the association lives).
-
-## HANA
-
-Preparation:
-* logon to cf account (e.g. trial)
-* create HANA service instance: `cf create-service hanatrial hdi-shared bookshop-db`
-
-First make the deplyoment without constraints (switch off constraint generation in `package.json`).
-
-* Run `cds build --production`. No constraints are generated.
-* Deploy db model: `cf push -f gen/db`
-* Deploy nodejs app: `cf push -f gen/srv --random-route`. Take note of the app URL.
-
-Run the requests in `request.http` (use the URL from the previous step as server URL, prepend with `https://`).
-Make sure to introduce some data that violates the constraints. No errors are reported - as expected.
-
-Now switch on constraint generation in `package.json`. 
-
-* Run `cds build --production`. The constraints are placed in separate `hdbconstraint` files in `gen\db\src\gen`. They are generated with `VALIDATED ON`.
-* Re-deploy db model: `cf push -f gen/db`. It fails, as the existing data violates the constraints.
-* Check logs: `cf logs bookshop-db-deployer --recent`.
-
-```
-Error: com.sap.hana.di.constraint: Could not create the database object [8250005]
-  at "src/gen/sap.capire.bookshop.Books_author.hdbconstraint" (1:1)
- Error: com.sap.hana.di.constraint: Database error 7: : feature not supported: referential constraint violated by existing value [8201003]
-   at "src/gen/sap.capire.bookshop.Books_author.hdbconstraint" (1:1)
-```
-You can see which constraint is violated, but there is no info about the offensive entries.
-
-Now use the requests from `request.http` to fix the entries that have been broken above.
-
-* Re-deploy db model: `cf push -f gen/db`. It should succeed.
-
-Again run the requests from `request.http`. This time all changes that would lead to a
-constraint violation fail.
-
-Inserting a book with non-existing author ID or changing a book's author ID to an invalid value yields
-the message
-```
-HTTP/1.1 500 Internal Server Error
-...
-{
-  "error": {
-    "code": "500",
-    "message": "Internal Server Error"
-  }
-}
-```
-When trying to delete a genre that is still referenced in a book we get
-```
-HTTP/1.1 462 status code 462
-...
-{
-  "error": {
-    "code": "462",
-    "message": "failed on update or delete by foreign key constraint violation: TrexColumnUpdate failed on table '21F87859727E470E94917B690908A09D:SAP_CAPIRE_BOOKSHOP_GENRES' with error: DELETE on 21F87859727E470E94917B690908A09D:SAP_CAPIRE_BOOKSHOP_GENRES(ID) failed, because 1 rows with corresponding foreign keys still exist in 21F87859727E470E94917B690908A09D:SAP_CAPIRE_BOOKSHOP_BOOKS(GENRE_ID), rc=1536"
-  }
-}
-```
-
-Note: when using `cdsc` to generate the constraints
-```
-cdsc Q --beta foreignKeyConstraints -d hana -s hdi -o dbstuff db\schema.cds srv\admin-service.cds
-```
-there will be constraints for e.g. `sap_common_Currencies_texts`. This cannot be deplyoed, as the corresponding table is removed from `cds` via the tree-shaking mechanism. These constraints need to be removed manually before deployment.
-
-## Todo
-
-* Provide a way to control parameters `VALIDATED` and `ENFORCED` of the constraints (only interesting for HANA, as in SQLite changing constraints after table generation is not possible).
-* Provide some tool to identify existing entries that violate constraints. We can generate a list of `SELECT` statements that find these entries, but how do we run it and show the results to the user?
-* Can runtimes improve the error messages?
+| Links to capire                                                                                           | Sample files / folders               |
+| --------------------------------------------------------------------------------------------------------- | ------------------------------------ |
+| [Project Setup and Layouts](https://cap.cloud.sap/docs/get-started/projects#sharing-and-reusing-content)  | [`./`](./)                           |
+| [Defining Domain Models](https://cap.cloud.sap/docs/guides/domain-models)                                 | [`./db/schema.cds`](./db/schema.cds) |
+| [Defining Services](https://cap.cloud.sap/docs/guides/providing-services)                                 | [`./srv/*.cds`](./srv)               |
+| [Single-purposed Services](https://cap.cloud.sap/docs/guides/providing-services#single-purposed-services) | [`./srv/*.cds`](./srv)               |
+| [Generic Providers](https://cap.cloud.sap/docs/guides/providing-services)                                  | http://localhost:4004                |
+| Using Databases                                            | [`./db/data/*.csv`](./db/data)       |
+| [Adding Custom Logic](https://cap.cloud.sap/docs/guides/service-impl)                                     | [`./srv/*.js`](./srv)                |
+| Adding Tests                                                 | [`./test`](./test)                   |
+| [Sharing for Reuse](https://cap.cloud.sap/docs/get-started/projects#sharing-and-reusing-content)          | [`./index.cds`](./index.cds)         |
--- a/bookshop/srv/admin-service.cds
+++ b/bookshop/srv/admin-service.cds
@@ -1,6 +1,5 @@
 using { sap.capire.bookshop as my } from '../db/schema';
-service AdminService {
+service AdminService @(requires_:'admin') {
  entity Books as projection on my.Books;
  entity Authors as projection on my.Authors;
-  entity Genres as projection on my.Genres;
 }
--- a/bookshop/srv/admin-service.js
+++ b/bookshop/srv/admin-service.js
@@ -1,15 +0,0 @@
-// sqlite: FK constraint checks need to be enabled by application at runtime
-// for each db connection
-const cds = require('@sap/cds')
-module.exports = cds.service.impl (async function(){ 
-
-  const db = await cds.connect.to('db')
-
-  if (db.kind === 'sqlite')
-  {
-    db.before('BEGIN', function (req) { 
-      //console.log('--- PRAGMA foreign_keys = ON ---')
-      return this.dbc.run('PRAGMA foreign_keys = ON;')
-    })
-  }
-})
--- a/bookshop/srv/cat-service.cds
+++ b/bookshop/srv/cat-service.cds
@@ -0,0 +1,10 @@
+using { sap.capire.bookshop as my } from '../db/schema';
+service CatalogService @(path:'/browse') {
+
+  @readonly entity Books as SELECT from my.Books {*,
+    author.name as author
+  } excluding { createdBy, modifiedBy };
+
+  @requires_: 'authenticated-user'
+  action submitOrder (book : Books.ID, amount: Integer);
+}
--- a/bookshop/srv/cat-service.js
+++ b/bookshop/srv/cat-service.js
@@ -0,0 +1,20 @@
+const cds = require('@sap/cds')
+module.exports = async function (){
+
+  const db = await cds.connect.to('db') // connect to database service
+  const { Books } = db.entities         // get reflected definitions
+
+  // Reduce stock of ordered books if available stock suffices
+  this.on ('submitOrder', async req => {
+    const {book,amount} = req.data
+    const n = await UPDATE (Books, book)
+      .with ({ stock: {'-=': amount }})
+      .where ({ stock: {'>=': amount }})
+    n > 0 || req.error (409,`${amount} exceeds stock for book #${book}`)
+  })
+
+  // Add some discount for overstocked books
+  this.after ('READ','Books', each => {
+    if (each.stock > 111)  each.title += ` -- 11% discount!`
+  })
+}
--- a/bookshop/test/genres.cds
+++ b/bookshop/test/genres.cds
@@ -0,0 +1,4 @@
+using { sap.capire.bookshop as my } from '../db/schema';
+service TestService {
+  entity Genres as projection on my.Genres;
+}
--- a/bookshop/test/genres.http
+++ b/bookshop/test/genres.http
@@ -0,0 +1,38 @@
+#################################################
+#
+#   Genres
+#
+
+GET http://localhost:4004/test/Genres?
+###
+
+GET http://localhost:4004/test/Genres?
+&$filter=parent_ID eq null&$select=name
+&$expand=children($select=name)
+###
+
+POST http://localhost:4004/test/Genres?
+Content-Type: application/json
+
+{ "ID":100, "name":"Some Sample Genres...", "children":[
+    { "ID":101, "name":"Cat", "children":[
+        { "ID":102, "name":"Kitty", "children":[
+            { "ID":103, "name":"Kitty Cat", "children":[
+                { "ID":104, "name":"Aristocat" } ]},
+            { "ID":105, "name":"Kitty Bat" } ]},
+        { "ID":106, "name":"Catwoman", "children":[
+            { "ID":107, "name":"Catalina" } ]} ]},
+    { "ID":108, "name":"Catweazle" }
+]}
+###
+
+GET http://localhost:4004/test/Genres(100)?
+# &$expand=children
+# &$expand=children($expand=children($expand=children($expand=children)))
+###
+
+DELETE http://localhost:4004/test/Genres(103)
+###
+
+DELETE http://localhost:4004/test/Genres(100)
+###
--- a/bookshop/test/requests.http
+++ b/bookshop/test/requests.http
@@ -1,68 +1,51 @@
-# running locally
@server = http://localhost:4004
-
-# running on cf
-#@server = https://bookshop-srv-....hana.ondemand.com
-
-### get all books
-GET {{server}}/admin/Books
-
-### get all authors
-GET {{server}}/admin/Authors
-
-### get all genres
-GET {{server}}/admin/Genres
+@me = Authorization: Basic {{$processEnv USER}}:


-### create book with wrong author ID -> should fail
-POST {{server}}/admin/Books
+### ------------------------------------------------------------------------
+# Get service info
+GET {{server}}/browse
+{{me}}
+
+
+### ------------------------------------------------------------------------
+# Get $metadata document
+GET {{server}}/browse/$metadata
+{{me}}
+
+
+### ------------------------------------------------------------------------
+# Browse Books as any user
+GET {{server}}/browse/Books?
+  # &$select=title,stock
+  # &$expand=currency
+  # &sap-language=de
+{{me}}
+
+
+### ------------------------------------------------------------------------
+# Fetch Authors as admin
+GET {{server}}/admin/Authors?
+  # &$select=name,dateOfBirth,placeOfBirth
+  # &$expand=books($select=title;$expand=currency)
+  # &$filter=ID eq 101
+  # &sap-language=de
+Authorization: Basic alice:
+
+
+### ------------------------------------------------------------------------
+# Submit Order as authenticated user
+# (send that three times to get out-of-stock message)
+POST {{server}}/browse/submitOrder
 Content-Type: application/json
+{{me}}

-{
-  "ID": 701,
-  "title": "XXX",
-  "author": { "ID": 9999 }
-}
-
-### create book with correct author ID -> should work
-POST {{server}}/admin/Books
-Content-Type: application/json;IEEE754Compatible=true
-
-{
-  "ID": 702,
-  "title": "Poems : Pocket Poets",
-  "author": { "ID": 101 }
-}
-
-### delete book
-DELETE {{server}}/admin/Books(ID=701)
-
-### change book to wrong author ID -> should fail
-
-PATCH {{server}}/admin/Books(ID=207)
-Content-Type:application/json
-
-{"author_ID": 9999}
-
-### change book to correct author ID -> should work
-
-PATCH {{server}}/admin/Books(ID=207)
-Content-Type:application/json
-
-{"author_ID": 170}
+{ "book":201, "amount":5 }


-
-### delete "leaf" genre that is used in a book -> should not work
-DELETE {{server}}/admin/Genres(ID=13)
-
-### delete "leaf" genre that is not used in a book -> should work
-DELETE {{server}}/admin/Genres(ID=14)
-
-
-### delete "header" genre where leaves are used in a book -> should not work
-DELETE {{server}}/admin/Genres(ID=10)
-
-
-### delete "header" genre where leaves are not used in a book -> should work and delete all leaves
-DELETE {{server}}/admin/Genres(ID=30)
+### ------------------------------------------------------------------------
+# Browse Genres
+GET {{server}}/browse/Genres?
+# &$filter=parent_ID eq null&$select=name
+# &$expand=children($select=name)
+{{me}}
--- a/common/data/sap.common-Currencies.csv
+++ b/common/data/sap.common-Currencies.csv
@@ -2,7 +2,7 @@ code;symbol;name;descr;numcode;minor;exponent
 EUR;€;Euro;European Euro;978;Cent;2
 USD;$;US Dollar;United States Dollar;840;Cent;2
 CAD;$;Canadian Dollar;Canadian Dollar;124;Cent;2
-AUD;$;Australian Dollar;Australian Dollar;036;Cent;2
+AUD;$;Australian Dollar;Canadian Dollar;036;Cent;2
 GBP;£;British Pound;Great Britain Pound;826;Penny;2
 ILS;₪;Shekel;Israeli New Shekel;376;Agorat;2
 INR;₹;Rupee;Indian Rupee;356;Paise;2
--- a/common/package.json
+++ b/common/package.json
@@ -1,8 +1,4 @@
 {
  "name": "@capire/common",
-  "description": "Provides a pre-built extension package for std @sap/cds/common",
-  "version": "1.0.0",
-  "dependencies": {
-    "@sap/cds": "*"
-  }
+  "version": "1.0.0"
 }
--- a/ext/.eslintrc
+++ b/ext/.eslintrc
@@ -0,0 +1,24 @@
+{
+    "extends": "eslint:recommended",
+    "env": {
+        "node": true,
+        "es6": true,
+        "jest": true
+    },
+    "parserOptions": {
+        "ecmaVersion": 2017
+    },
+    "globals": {
+        "SELECT": true,
+        "INSERT": true,
+        "UPDATE": true,
+        "DELETE": true,
+        "CREATE": true,
+        "DROP": true,
+        "cds": true
+    },
+    "rules": {
+        "no-console": "off",
+        "require-atomic-updates": "off"
+    }
+}
--- a/ext/.gitignore
+++ b/ext/.gitignore
@@ -0,0 +1,30 @@
+# CAP ext
+_out
+*.db
+connection.properties
+default-*.json
+gen/
+node_modules/
+package-lock.json
+target/
+
+# Web IDE, App Studio
+.che/
+.gen/
+
+# MTA
+*_mta_build_tmp
+*.mtar
+mta_archives/
+
+# Other
+.DS_Store
+*.orig
+*.log
+
+*.iml
+*.flattened-pom.xml
+
+# IDEs
+.vscode
+.idea
--- a/ext/db/schema.cds
+++ b/ext/db/schema.cds
@@ -0,0 +1,6 @@
+using { sap.capire.bookshop.Books } from '@capire/bookshop';
+
+extend Books with {
+  ISBN : String;
+  discount : Decimal @assert.range:[0,1];
+}
--- a/ext/package.json
+++ b/ext/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "ext",
+  "version": "1.0.0",
+  "description": "A simple CAP project.",
+  "repository": "<Add your repository here>",
+  "license": "UNLICENSED",
+  "private": true,
+  "dependencies": {
+    "@capire/bookshop": "../bookshop",
+    "@sap/cds": "^4",
+    "express": "^4"
+  },
+  "devDependencies": {
+    "sqlite3": "^4"
+  },
+  "scripts": {
+    "start": "npx cds run"
+  }
+}
--- a/ext/server.js
+++ b/ext/server.js
@@ -0,0 +1,40 @@
+const cds = require ('@sap/cds')
+const path = require ('path')
+const fs = require ('fs')
+const protected = {db:1,messaging:1,auth:1}
+const { isfile } = cds.utils
+
+cds.on('served', ()=>{
+  for (let each of cds.services) {
+    if (each.name in protected) continue
+    // search for local srv/<each>.js files and if exist
+    // activate them in a service extension sandbox
+    const impl = isfile (path.resolve('srv/'+each.name+'.js'))
+    if (impl) activate_sandboxed (each,impl)
+  }
+})
+
+function activate_sandboxed (srv,impl) {
+  console.log (`[cds] - extending ${srv.name} with sandboxed:`, {impl:path.relative(process.cwd(),impl)})
+  const src = fs.readFileSync (impl)
+  const sandbox = Object.keys(global).filter(name => name !== 'cds')
+  const fn = new Function (
+    'module','cds','global','process', ...sandbox,
+    src
+  )
+  // restricted sandboxed variant of 'module' and 'cds'
+  const module = {}
+  const cds = {
+    service: {
+      impl: fn=>fn
+    }
+  }
+  fn (module,cds,undefined,undefined, ...sandbox.map((()=>(undefined))))
+  if (typeof module.exports === 'function') try {
+    module.exports.call (srv,srv)
+  } catch (e) {
+    console.log (e)
+  }
+}
+
+module.exports = cds.server
--- a/ext/srv/AdminService.js
+++ b/ext/srv/AdminService.js
@@ -0,0 +1,10 @@
+module.exports = cds.service.impl(function(){
+
+  this.before(['CREATE','UPDATE'],'Books', req => {  //> ....
+    const book = req.data
+    if (book.stock < 10 && book.discount > 0.5) {
+      req.error('Hey, da sind so wenig übrig, die wollen wir nicht zu billig verticken')
+    }
+  })
+
+})
--- a/ext/srv/CatalogService.js
+++ b/ext/srv/CatalogService.js
@@ -0,0 +1,9 @@
+console.log ('Böses Zeug', global, process, cds)
+// process.exit()
+// const fs = require('fs')
+// cds.run('Böses Zeugs')
+// SELECT.from ('Foo')
+
+module.exports = cds.service.impl(function(){
+  this.after('READ','Books', each => each.title += ' (served through sandbox)')
+})
--- a/fiori/.env
+++ b/fiori/.env
@@ -1,2 +1 @@
-# cds.requires.messaging.kind = file-based-messaging
-PORT = 4004
+cds.features.snapi = y
--- a/fiori/app/_i18n/i18n.properties
+++ b/fiori/app/_i18n/i18n.properties
@@ -7,20 +7,7 @@ AuthorID = Author ID
 Stock = Stock
 Name = Name
 AuthorName = Author's Name
-DateOfBirth = Date of Birth
-DateOfDeath = Date of Death
-PlaceOfBirth = Place of Birth
-PlaceOfDeath = Place of Death
-Age = Age
 Authors = Authors
 Order = Order
 Orders = Orders
 Price = Price
-
-Genre = Genre
-Genres = Genres
-SubGenres = Sub Genres
-
-NumCode = Numeric Code
-MinorUnit = Minor Unit
-Exponent = Exponent
--- a/fiori/app/_i18n/i18n_de.properties
+++ b/fiori/app/_i18n/i18n_de.properties
@@ -6,7 +6,6 @@ Authors = Autoren
 Author = Autor
 AuthorID = ID des Autors
 AuthorName = Name des Autors
-Age = Alter
 Name = Name
 Stock = Bestand
 Order = Bestellung
--- a/fiori/app/admin/fiori-service.cds
+++ b/fiori/app/admin/fiori-service.cds
@@ -1,4 +1,4 @@
-using { AdminService } from '../../db/schema';
+using AdminService from '@capire/bookshop';

 ////////////////////////////////////////////////////////////////////////////
 //
@@ -39,27 +39,6 @@ annotate AdminService.Books with @(
 	}
 );

-annotate AdminService.Authors with @(
-	UI: {
-		HeaderInfo: {
-			Description: {Value: lifetime}
-		},
-		Facets: [
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>Details}', Target: '@UI.FieldGroup#Details'},
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>Books}', Target: 'books/@UI.LineItem'},
-		],
-		FieldGroup#Details: {
-			Data: [
-				{Value: placeOfBirth},
-				{Value: placeOfDeath},
-				{Value: dateOfBirth},
-				{Value: dateOfDeath},
-				{Value: age, Label: '{i18n>Age}'},
-			]
-		},
-	}
-);
-


 ////////////////////////////////////////////////////////////
--- a/fiori/app/admin/webapp/Component.js
+++ b/fiori/app/admin/webapp/Component.js
@@ -1,8 +1,5 @@
-sap.ui.define(["sap/fe/core/AppComponent"], function(AppComponent) {
-	"use strict";
-	return AppComponent.extend("admin.Component", {
-		metadata: { manifest: "json" }
-	});
-});
+sap.ui.define(["sap/fe/core/AppComponent"], ac => ac.extend("admin.Component", {
+    metadata:{ manifest:'json' }
+}))

 /* eslint no-undef:0 */
--- a/fiori/app/admin/webapp/manifest.json
+++ b/fiori/app/admin/webapp/manifest.json
@@ -24,7 +24,7 @@
    "sap.ui5": {
        "dependencies": {
            "libs": {
-                "sap.fe.templates": {}
+                "sap.fe": {}
            }
        },
        "models": {
--- a/fiori/app/bookshop.html
+++ b/fiori/app/bookshop.html
@@ -1,3 +0,0 @@
-<head>
-  <meta http-equiv="refresh" content="0;url=bookshop/index.html">
-</head>
--- a/fiori/app/browse/fiori-service.cds
+++ b/fiori/app/browse/fiori-service.cds
@@ -7,8 +7,6 @@ using CatalogService from '@capire/bookshop';
 annotate CatalogService.Books with @(
 	UI: {
  	HeaderInfo: {
-			TypeName: 'Book',
-			TypeNamePlural: 'Books',
  		Description: {Value: author}
  	},
 		HeaderFacets: [
--- a/fiori/app/browse/webapp/Component.js
+++ b/fiori/app/browse/webapp/Component.js
@@ -1,7 +1,5 @@
-sap.ui.define(["sap/fe/core/AppComponent"], function(AppComponent) {
-	"use strict";
-	return AppComponent.extend("bookshop.Component", {
-		metadata: { manifest: "json" }
-	});
-});
+sap.ui.define(["sap/fe/core/AppComponent"], ac => ac.extend("bookshop.Component", {
+    metadata:{ manifest:'json' }
+}))
+
 /* eslint no-undef:0 */
--- a/fiori/app/browse/webapp/manifest.json
+++ b/fiori/app/browse/webapp/manifest.json
@@ -24,7 +24,7 @@
  "sap.ui5": {
    "dependencies": {
      "libs": {
-        "sap.fe.templates": {}
+        "sap.fe": {}
      }
    },
    "models": {
--- a/fiori/app/common.cds
+++ b/fiori/app/common.cds
@@ -1,9 +1,9 @@
 /*
-	Common Annotations shared by all apps
+  Common Annotations shared by all apps
 */

 using { sap.capire.bookshop as my } from '@capire/bookshop';
-using { sap.common } from '@capire/common';
+

 ////////////////////////////////////////////////////////////////////////////
 //
@@ -13,7 +13,7 @@ annotate my.Books with @(
 	Common.SemanticKey: [title],
 	UI: {
 		Identification: [{Value:title}],
-		SelectionFields: [ ID, author_ID, price, currency_code ],
+	  SelectionFields: [ ID, author_ID, price, currency_code ],
 		LineItem: [
 			{Value: ID},
 			{Value: title},
@@ -28,18 +28,25 @@ annotate my.Books with @(
 	author @ValueList.entity:'Authors';
 };

+annotate my.Authors with @(
+	UI: {
+		Identification: [{Value:name}],
+	}
+);
+
+
 ////////////////////////////////////////////////////////////////////////////
 //
 //	Books Details
 //
 annotate my.Books with @(
 	UI: {
-		HeaderInfo: {
-			TypeName: '{i18n>Book}',
-			TypeNamePlural: '{i18n>Books}',
-			Title: {Value: title},
-			Description: {Value: author.name}
-		},
+  	HeaderInfo: {
+  		TypeName: '{i18n>Book}',
+  		TypeNamePlural: '{i18n>Books}',
+  		Title: {Value: title},
+  		Description: {Value: author.name}
+  	},
 	}
 );

@@ -59,199 +66,15 @@ annotate my.Books with {
 	descr @UI.MultiLineText;
 }

-////////////////////////////////////////////////////////////////////////////
-//
-//	Genres List
-//
-annotate my.Genres with @(
-	Common.SemanticKey: [name],
-	UI: {
-		SelectionFields: [ name ],
-		LineItem:[
-			{Value: name},
-			{Value: parent.name, Label: 'Main Genre'},
-		],
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Genre Details
-//
-annotate my.Genres with @(
-	UI: {
-		Identification: [{Value:name}],
-		HeaderInfo: {
-			TypeName: '{i18n>Genre}',
-			TypeNamePlural: '{i18n>Genres}',
-			Title: {Value: name},
-			Description: {Value: ID}
-		},
-		Facets: [
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>SubGenres}', Target: 'children/@UI.LineItem'},
-		],
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Genres Elements
-//
 annotate my.Genres with {
-	ID  @title: '{i18n>ID}';
-	name  @title: '{i18n>Genre}';
+  name  @title: '{i18n>Genre}';
 }

-////////////////////////////////////////////////////////////////////////////
-//
-//	Authors List
-//
-annotate my.Authors with @(
-	Common.SemanticKey: [name],
-	UI: {
-		Identification: [{Value:name}],
-		SelectionFields: [ name ],
-		LineItem:[
-			{Value: ID},
-			{Value: name},
-			{Value: dateOfBirth},
-			{Value: dateOfDeath},
-			{Value: placeOfBirth},
-			{Value: placeOfDeath},
-		],
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Author Details
-//
-annotate my.Authors with @(
-	UI: {
-		HeaderInfo: {
-			TypeName: '{i18n>Author}',
-			TypeNamePlural: '{i18n>Authors}',
-			Title: {Value: name},
-			Description: {Value: dateOfBirth}
-		},
-		Facets: [
-			{$Type: 'UI.ReferenceFacet', Target: 'books/@UI.LineItem'},
-		],
-	}
-);
-
-
 ////////////////////////////////////////////////////////////////////////////
 //
 //	Authors Elements
 //
 annotate my.Authors with {
 	ID @title:'{i18n>ID}' @UI.HiddenFilter;
-	name @title:'{i18n>Name}';
-	dateOfBirth @title:'{i18n>DateOfBirth}';
-	dateOfDeath @title:'{i18n>DateOfDeath}';
-	placeOfBirth @title:'{i18n>PlaceOfBirth}';
-	placeOfDeath @title:'{i18n>PlaceOfDeath}';
-}
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Languages List
-//
-annotate common.Languages with @(
-	Common.SemanticKey: [code],
-	Identification: [{Value:code}],
-	UI: {
-		SelectionFields: [ name, descr ],
-		LineItem:[
-			{Value: code},
-			{Value: name},
-		],
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Language Details
-//
-annotate common.Languages with @(
-	UI: {
-		HeaderInfo: {
-			TypeName: '{i18n>Language}',
-			TypeNamePlural: '{i18n>Languages}',
-			Title: {Value: name},
-			Description: {Value: descr}
-		},
-		Facets: [
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>Details}', Target: '@UI.FieldGroup#Details'},
-		],
-		FieldGroup#Details: {
-			Data: [
-				{Value: code},
-				{Value: name},
-				{Value: descr}
-			]
-		},
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Currencies List
-//
-annotate common.Currencies with @(
-	Common.SemanticKey: [code],
-	Identification: [{Value:code}],
-	UI: {
-		SelectionFields: [ name, descr ],
-		LineItem:[
-			{Value: descr},
-			{Value: symbol},
-			{Value: code},
-		],
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Currency Details
-//
-annotate common.Currencies with @(
-	UI: {
-		HeaderInfo: {
-			TypeName: '{i18n>Currency}',
-			TypeNamePlural: '{i18n>Currencies}',
-			Title: {Value: descr},
-			Description: {Value: code}
-		},
-		Facets: [
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>Details}', Target: '@UI.FieldGroup#Details'},
-			{$Type: 'UI.ReferenceFacet', Label: '{i18n>Extended}', Target: '@UI.FieldGroup#Extended'},
-		],
-		FieldGroup#Details: {
-			Data: [
-				{Value: name},
-				{Value: symbol},
-				{Value: code},
-				{Value: descr}
-			]
-		},
-		FieldGroup#Extended: {
-			Data: [
-				{Value: numcode},
-				{Value: minor},
-				{Value: exponent}
-			]
-		},
-	}
-);
-
-////////////////////////////////////////////////////////////////////////////
-//
-//	Currencies Elements
-//
-annotate common.Currencies with {
-	numcode @title:'{i18n>NumCode}';
-	minor @title:'{i18n>MinorUnit}';
-	exponent @title:'{i18n>Exponent}';
+	name @title:'{i18n>AuthorName}';
 }
--- a/fiori/app/admin-fiori.html
+++ b/fiori/app/admin-fiori.html
@@ -13,7 +13,7 @@
 			applications: {
 				"browse-books": {
 					title: "Browse Books",
-					description: "w/ SAP Fiori Elements",
+					description: "... testing FE v42",
 					additionalInformation: "SAPUI5.Component=bookshop",
 					applicationType : "URL",
 					url: "/browse/webapp",
@@ -21,15 +21,15 @@
 				},
 				"manage-books": {
 					title: "Manage Books",
-					description: "w/ SAP Fiori Elements",
+					description: "... testing FE v42",
 					additionalInformation: "SAPUI5.Component=admin",
 					applicationType : "URL",
 					url: "/admin/webapp",
 					navigationMode: "embedded"
 				},
 				"manage-orders": {
-					title: "Manage Orders",
-					description: "w/ SAP Fiori Elements",
+					title: "Order Books",
+					description: "... testing FE v42",
 					additionalInformation: "SAPUI5.Component=orders",
 					applicationType : "URL",
 					url: "/orders/webapp",
@@ -39,8 +39,8 @@
 		};
 	</script>

-	<script id="sap-ushell-bootstrap" src="https://sapui5.hana.ondemand.com/test-resources/sap/ushell/bootstrap/sandbox.js"></script>
-	<script id="sap-ui-bootstrap" src="https://sapui5.hana.ondemand.com/resources/sap-ui-core.js"
+	<script src="https://sapui5.hana.ondemand.com/test-resources/sap/ushell/bootstrap/sandbox.js"></script>
+	<script src="https://sapui5.hana.ondemand.com/resources/sap-ui-core.js"
    	data-sap-ui-libs="sap.m, sap.ushell, sap.collaboration, sap.ui.layout"
    	data-sap-ui-compatVersion="edge"
    	data-sap-ui-theme="sap_fiori_3"
--- a/fiori/app/services.cds
+++ b/fiori/app/services.cds
@@ -4,9 +4,7 @@

 using from './admin/fiori-service';
 using from './browse/fiori-service';
+using from './orders/fiori-service';
 using from './common';

 using from '@capire/common';
-
-// only works in case of embedded orders service
-using from '@capire/orders/app/orders/fiori-service';
--- a/orders/app/orders/fiori-service.cds
+++ b/orders/app/orders/fiori-service.cds
@@ -1,27 +1,44 @@
+using OrdersService from '@capire/orders/srv/orders-service';
+
+annotate OrdersService.Books with {
+	price @Common.FieldControl: #ReadOnly;
+}


 ////////////////////////////////////////////////////////////////////////////
 //
-//	Note: this is designed for the OrdersService being co-located with
-//	bookshop. It does not work if OrdersService is run as a separate
-// 	process, and is not intended to do so.
+//	Common
 //
-////////////////////////////////////////////////////////////////////////////
-
-
-
-using { OrdersService } from '../../srv/orders-service';
+annotate OrdersService.OrderItems with {
+	book @(
+		Common: {
+			Text: book.title,
+			FieldControl: #Mandatory
+		},
+		ValueList.entity:'Books',
+	);
+	amount @(
+		Common.FieldControl: #Mandatory
+	);
+}


@odata.draft.enabled
 annotate OrdersService.Orders with @(
 	UI: {
+		////////////////////////////////////////////////////////////////////////////
+		//
+		//	Lists of Orders
+		//
 		SelectionFields: [ createdAt, createdBy ],
 		LineItem: [
-			{Value: OrderNo, Label:'OrderNo'},
-			{Value: buyer, Label:'Customer'},
+			{Value: createdBy, Label:'Customer'},
 			{Value: createdAt, Label:'Date'}
 		],
+		////////////////////////////////////////////////////////////////////////////
+		//
+		//	Order Details
+		//
 		HeaderInfo: {
 			TypeName: 'Order', TypeNamePlural: 'Orders',
 			Title: {
@@ -45,7 +62,7 @@ annotate OrdersService.Orders with @(
 		],
 		FieldGroup#Details: {
 			Data: [
-				{Value: currency.code, Label:'Currency'}
+				{Value: currency_code, Label:'Currency'}
 			]
 		},
 		FieldGroup#Created: {
@@ -68,25 +85,36 @@ annotate OrdersService.Orders with @(



-annotate OrdersService.Orders_Items with @(
+//The enity types name is OrdersService.my_bookshop_OrderItems
+//The annotations below are not generated in edmx WHY?
+annotate OrdersService.OrderItems with @(
 	UI: {
+		HeaderInfo: {
+			TypeName: 'Order Item', TypeNamePlural: '	',
+			Title: {
+				Value: book.title
+			},
+			Description: {Value: book.descr}
+		},
+		// There is no filterbar for items so the selctionfileds is not needed
+		SelectionFields: [ book_ID ],
+		////////////////////////////////////////////////////////////////////////////
+		//
+		//	Lists of OrderItems
+		//
 		LineItem: [
-			{Value: product_ID, Label:'Product ID'},
-			{Value: title, Label:'Product Title'},
-			{Value: price, Label:'Unit Price'},
+			{Value: book_ID, Label:'Book'},
+			//The following entry is only used to have the assoication followed in the read event
+			{Value: book.price, Label:'Book Price'},
 			{Value: amount, Label:'Quantity'},
 		],
 		Identification: [ //Is the main field group
+			//{Value: ID, Label:'ID'}, //A guid shouldn't be on the UI
+			{Value: book_ID, Label:'Book'},
 			{Value: amount, Label:'Amount'},
-			{Value: title, Label:'Product'},
-			{Value: price, Label:'Unit Price'},
 		],
 		Facets: [
 			{$Type: 'UI.ReferenceFacet', Label: '{i18n>OrderItems}', Target: '@UI.Identification'},
 		],
 	},
-) {
-	amount @(
-		Common.FieldControl: #Mandatory
-	);
-};
+);
--- a/fiori/app/orders/webapp/Component.js
+++ b/fiori/app/orders/webapp/Component.js
@@ -0,0 +1,5 @@
+sap.ui.define(["sap/fe/core/AppComponent"], ac => ac.extend("orders.Component", {
+    metadata:{ manifest:'json' }
+}))
+
+/* eslint no-undef:0 */
--- a/orders/app/orders/webapp/i18n/i18n.properties
+++ b/orders/app/orders/webapp/i18n/i18n.properties
--- a/orders/app/orders/webapp/manifest.json
+++ b/orders/app/orders/webapp/manifest.json
@@ -24,7 +24,7 @@
 	"sap.ui5": {
        "dependencies": {
            "libs": {
-                "sap.fe.templates": {}
+                "sap.fe": {}
            }
        },
 		"models": {
@@ -121,7 +121,7 @@
                    "name": "sap.fe.templates.ObjectPage",
                    "options": {
                        "settings" : {
-                            "entitySet": "Orders_Items"
+                            "entitySet": "OrderItems"
                        }
                    }
                },
--- a/fiori/app/reviews.html
+++ b/fiori/app/reviews.html
@@ -1,3 +0,0 @@
-<head>
-  <meta http-equiv="refresh" content="0;url=reviews/index.html">
-</head>
--- a/fiori/db/hana/index.cds
+++ b/fiori/db/hana/index.cds
@@ -1,10 +0,0 @@
-//
-//  Add Author.age and .lifetime with a DB-specific function
-//
-
-using { AdminService } from '../schema';
-
-extend projection AdminService.Authors with {
-  YEARS_BETWEEN(dateOfBirth, dateOfDeath)         as age: Integer,
-  YEAR(dateOfBirth) || ' – ' || YEAR(dateOfDeath) as lifetime : String
-}
--- a/fiori/db/schema.cds
+++ b/fiori/db/schema.cds
@@ -1,8 +1,3 @@
-using { sap.capire.bookshop } from '@capire/bookshop';
-
-// Forward-declare calculated fields to be filled in database-specific ways
-// TODO find a better way to have 'default' fields that still can be overwritten.
-extend bookshop.Authors with {
-	virtual age: Integer;
-	virtual lifetime: String;
-}
+// Proxy for importing schema from bookshop sample
+using from '@capire/bookshop';
+namespace sap.capire.bookshop;
--- a/fiori/db/sqlite/index.cds
+++ b/fiori/db/sqlite/index.cds
@@ -1,10 +0,0 @@
-//
-//  Add Author.age and .lifetime with a DB-specific function
-//
-
-using { AdminService } from '../schema';
-
-extend projection AdminService.Authors with {
-  strftime('%Y',dateOfDeath)-strftime('%Y',dateOfBirth)              as age: Integer,
-  strftime('%Y',dateOfBirth) || ' – ' || strftime('%Y',dateOfDeath)  as lifetime : String
-}
--- a/fiori/package.json
+++ b/fiori/package.json
@@ -2,43 +2,21 @@
  "name": "@capire/fiori",
  "version": "1.0.0",
  "dependencies": {
-    "@capire/bookshop": "*",
-    "@capire/reviews": "*",
-    "@capire/orders": "*",
-    "@capire/common": "*",
-    "@sap/cds": ">=4",
-    "express": "^4.17.1",
-    "passport": "^0.4.1"
+    "@capire/bookshop": "../bookshop",
+    "@capire/orders": "../orders",
+    "@capire/common": "../common",
+    "@sap/cds": ">=3.33.1",
+    "express": "^4.17.1"
  },
  "scripts": {
    "start": "cds run --in-memory?",
    "watch": "cds watch"
  },
  "cds": {
-    "hana": {
-      "deploy-format": "hdbtable"
-    },
    "requires": {
-      "auth": {
-        "strategy": "dummy"
-      },
-      "ReviewsService": {
-        "kind": "odata",
-        "model": "@capire/reviews"
-      },
-      "OrdersService": {
-        "kind": "odata",
-        "model": "@capire/orders"
-      },
      "db": {
-        "kind": "sql",
-        "[development]": {
-          "model": "db/sqlite"
-        },
-        "[production]": {
-          "model": "db/hana"
-        }
+        "kind": "sql"
      }
    }
  }
-}
+}
--- a/fiori/server.js
+++ b/fiori/server.js
@@ -1,18 +0,0 @@
-const cds = require ('@sap/cds')
-
-cds.once('bootstrap',(app)=>{
-  app.use ('/orders/webapp', _from('@capire/orders/app/orders/webapp/manifest.json'))
-  app.use ('/bookshop', _from('@capire/bookshop/app/vue/index.html'))
-  app.use ('/reviews', _from('@capire/reviews/app/vue/index.html'))
-})
-
-cds.once('served', require('./srv/mashup'))
-
-module.exports = cds.server
-
-
-// -----------------------------------------------------------------------
-// Helper for serving static content from npm-installed packages
-const {static} = require('express')
-const {dirname} = require('path')
-const _from = target => static (dirname (require.resolve(target)))
--- a/fiori/srv/admin-service.cds
+++ b/fiori/srv/admin-service.cds
@@ -0,0 +1,3 @@
+// Proxy for importing services from bookshop sample
+using from '@capire/bookshop';
+annotate AdminService with @impl:'srv/admin-service.js';
--- a/fiori/srv/admin-service.js
+++ b/fiori/srv/admin-service.js
@@ -0,0 +1,8 @@
+const cds = require('@sap/cds')
+
+module.exports = cds.service.impl (async function() {
+  const {Books} = cds.entities
+  const {ID} = await SELECT.one.from(Books).columns('max(ID) as ID')
+  let newID = ID - ID % 100 + 100
+  this.before ('NEW','Books', req => req.data.ID = ++newID)
+})
--- a/fiori/srv/mashup.cds
+++ b/fiori/srv/mashup.cds
@@ -1,25 +0,0 @@
-////////////////////////////////////////////////////////////////////////////
-//
-//    Mashing up imported models...
-//
-
-using { sap.capire.bookshop.Books } from '@capire/bookshop';
-
-//
-//  Extend Books with access to Reviews and average ratings
-//
-
-using { ReviewsService.Reviews } from '@capire/reviews';
-extend Books with {
-  reviews : Composition of many Reviews on reviews.subject = $self.ID;
-  rating  : Decimal;
-}
-
-//
-//  Extend Orders with Books as Products
-//
-
-using { sap.capire.orders.Orders_Items } from '@capire/orders';
-extend Orders_Items with {
-  book : Association to Books on product.ID = book.ID
-}
--- a/fiori/srv/mashup.js
+++ b/fiori/srv/mashup.js
@@ -1,59 +0,0 @@
-////////////////////////////////////////////////////////////////////////////
-//
-//    Mashing up provided and required services...
-//
-module.exports = async()=>{ // called by server.js
-
-  const cds = require('@sap/cds')
-  const CatalogService = await cds.connect.to ('CatalogService')
-  const ReviewsService = await cds.connect.to ('ReviewsService')
-  const OrdersService = await cds.connect.to ('OrdersService')
-  const db = await cds.connect.to ('db')
-
-  // reflect entity definitions used below...
-  const { Books } = db.entities ('sap.capire.bookshop')
-
-  //
-  // Delegate requests to read reviews to the ReviewsService
-  // Note: prepend is neccessary to intercept generic default handler
-  //
-  CatalogService.prepend (srv => srv.on ('READ', 'Books/reviews', (req) => {
-    console.debug ('> delegating request to ReviewsService')
-    const [id] = req.params, { columns, limit } = req.query.SELECT
-    return ReviewsService.tx(req).read ('Reviews',columns).limit(limit).where({subject:String(id)})
-  }))
-
-  //
-  // Create an order with the OrdersService when CatalogService signals a new order
-  //
-  CatalogService.on ('OrderedBook', async (msg) => {
-    const { book, amount, buyer } = msg.data
-    const { title, price } = await db.tx(msg).read (Books, book, b => { b.title, b.price })
-    return OrdersService.tx(msg).create ('Orders').entries({
-      OrderNo: 'Order at '+ (new Date).toLocaleString(),
-      Items: [{ product:{ID:`${book}`}, title, price, amount }],
-      buyer, createdBy: buyer
-    })
-  })
-
-  //
-  // Update Books' average ratings when ReviewsService signals updatd reviews
-  //
-  ReviewsService.on ('reviewed', (msg) => {
-    console.debug ('> received:', msg.event, msg.data)
-    const { subject, rating } = msg.data
-    return UPDATE(Books,subject).with({rating})
-    // ^ Note: the framework will execute this and take care for db.tx
-  })
-
-  //
-  // Reduce stock of ordered books for orders are created from Orders admin UI
-  //
-  OrdersService.on ('OrderChanged', (msg) => {
-    console.debug ('> received:', msg.event, msg.data)
-    const { product, deltaAmount } = msg.data
-    return UPDATE (Books) .where ('ID =', product)
-    .and ('stock >=', deltaAmount)
-    .set ('stock -=', deltaAmount)
-  })
-}
--- a/fiori/test/requests.http
+++ b/fiori/test/requests.http
@@ -1,77 +0,0 @@
-
-@bookshop = http://localhost:4004
-@reviews-service = {{bookshop}}/reviews
-# Uncomment this when running a separate reviews service
-@reviews-service = http://localhost:4005/reviews
-
-
-
-#################################################
-#
-#   Reviews Service
-#
-
-GET {{reviews-service}}/Reviews
-
-###
-
-POST {{reviews-service}}/Reviews
-Authorization: Basic {{$processEnv USER}}:
-Content-Type: application/json
-
-{"subject":"201", "title":"boo", "rating":3 }
-
-
-
-#################################################
-#
-#   Bookshop Services
-#
-
-GET {{bookshop}}/browse/Books/201/reviews?
-&$select=rating,date,title
-&$top=3
-
-###
-
-GET {{bookshop}}/browse/Books(201)?
-&$select=ID,title,rating
-&$expand=reviews
-
-
-
-#################################################
-#
-#   Orders Service, incl. draft choreography
-#
-@newOrderID = e939604c-ab83-4d4f-bdb6-95fe30b3773e
-
-GET {{bookshop}}/orders/Orders
-
-### Create order, still inactive
-POST {{bookshop}}/orders/Orders
-Content-Type: application/json
-
-{"ID": "{{newOrderID}}"}
-
-### Get inactive order.  We have to specify `IsActiveEntity`.
-GET {{bookshop}}/orders/Orders(ID={{newOrderID}},IsActiveEntity=false)
-
-### Activate order using `.../<servicename>.draftActivate`
-POST {{bookshop}}/orders/Orders(ID={{newOrderID}},IsActiveEntity=false)/OrdersService.draftActivate
-Content-Type: application/json
-
-### Get active order
-GET {{bookshop}}/orders/Orders(ID={{newOrderID}},IsActiveEntity=true)
-
-### Create author
-POST {{bookshop}}/admin/Authors
-Content-Type: application/json
-Authorization: Basic alice:
-
-{
-  "ID": 200,
-  "name": "William Shakespeare",
-  "dateOfBirth": "1564-04-26",
-  "dateOfDeath": "1616-04-23"
-}
--- a/media/test/Test.png
+++ b/media/test/Test.png
--- a/media/test/media.http
+++ b/media/test/media.http
@@ -1,35 +0,0 @@
-### Requires REST Client for VS Code
-### https://marketplace.visualstudio.com/items?itemName=humao.rest-client
-###
-@protocol = http
-@host = localhost
-@port = 4004
-### Read Pictures
-GET {{protocol}}://{{host}}:{{port}}/media-server/Media
-Authorization: Basic admin:
-
-### Create Picture with mediatype
-POST {{protocol}}://{{host}}:{{port}}/media-server/Media
-Authorization: Basic admin:
-Accept: application/json
-Content-Type: application/json
-
-{ 
-  "id": 1,
-  "mediaType": "image/png" 
-}
-
-### Upload Binary PNG
-PUT {{protocol}}://{{host}}:{{port}}/media-server/Media(1)/content
-Authorization: Basic admin:
-Content-Type: image/png
-
-< ./Test.png
-
-### Read Binary
-GET {{protocol}}://{{host}}:{{port}}/media-server/Media(1)/content
-Authorization: Basic admin:
-
-### Delete Image
-DELETE {{protocol}}://{{host}}:{{port}}/media-server/Media(1)
-Authorization: Basic admin:
--- a/orders/.env
+++ b/orders/.env
@@ -1,2 +0,0 @@
-cds.requires.messaging.kind = file-based-messaging
-PORT = 4006
--- a/orders/app/fiori-app.html
+++ b/orders/app/fiori-app.html
@@ -1,39 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-
-	<meta http-equiv="X-UA-Compatible" content="IE=edge" />
-	<meta http-equiv="Content-Type" content="text/html;charset=UTF-8" />
-	<meta name="viewport" content="width=device-width, initial-scale=1.0" />
-	<title>Bookshop</title>
-
-	<script>
-		window["sap-ushell-config"] = {
-			defaultRenderer: "fiori2",
-			applications: {
-				"manage-orders": {
-					title: "Manage Orders",
-					description: "... testing FE v42",
-					additionalInformation: "SAPUI5.Component=orders",
-					applicationType : "URL",
-					url: "/orders/webapp",
-					navigationMode: "embedded"
-				}
-			}
-		};
-	</script>
-
-	<script id="sap-ushell-bootstrap" src="https://sapui5.hana.ondemand.com/test-resources/sap/ushell/bootstrap/sandbox.js"></script>
-	<script id="sap-ui-bootstrap" src="https://sapui5.hana.ondemand.com/resources/sap-ui-core.js"
-    	data-sap-ui-libs="sap.m, sap.ushell, sap.collaboration, sap.ui.layout"
-    	data-sap-ui-compatVersion="edge"
-    	data-sap-ui-theme="sap_fiori_3"
-    	data-sap-ui-frameOptions="allow"
-	></script>
-	<script>
-		sap.ui.getCore().attachInit(()=> sap.ushell.Container.createRenderer().placeAt("content"))
-	</script>
-
-</head>
-<body class="sapUiBody" id="content"></body>
-</html>
--- a/orders/app/index.cds
+++ b/orders/app/index.cds
@@ -1,5 +0,0 @@
-/*
-  This model controls what gets served to Fiori frontends...
-*/
-
-using from './orders/fiori-service';
--- a/orders/app/orders/webapp/Component.js
+++ b/orders/app/orders/webapp/Component.js
@@ -1,8 +0,0 @@
-sap.ui.define(["sap/fe/core/AppComponent"], function(AppComponent) {
-	"use strict";
-	return AppComponent.extend("orders.Component", {
-		metadata: { manifest: "json" }
-	});
-});
-
-/* eslint no-undef:0 */
--- a/orders/db/data/sap.capire.bookshop-OrderItems.csv
+++ b/orders/db/data/sap.capire.bookshop-OrderItems.csv
@@ -0,0 +1,4 @@
+ID;amount;parent_ID;book_ID;netAmount
+58040e66-1dcd-4ffb-ab10-fdce32028b79;1;7e2f2640-6866-4dcf-8f4d-3027aa831cad;201;11.11
+64e718c9-ff99-47f1-8ca3-950c850777d4;1;7e2f2640-6866-4dcf-8f4d-3027aa831cad;271;15
+e9641166-e050-4261-bfee-d1e797e6cb7f;2;64e718c9-ff99-47f1-8ca3-950c850777d4;252;28
--- a/orders/db/data/sap.capire.bookshop-Orders.csv
+++ b/orders/db/data/sap.capire.bookshop-Orders.csv
@@ -0,0 +1,3 @@
+ID;modifiedAt;createdAt;createdBy;modifiedBy;OrderNo;currency_code
+7e2f2640-6866-4dcf-8f4d-3027aa831cad;;2019-01-31;john.doe@test.com;;1;EUR
+64e718c9-ff99-47f1-8ca3-950c850777d4;;2019-01-30;jane.doe@test.com;;2;EUR
--- a/orders/db/data/sap.capire.orders-Orders.csv
+++ b/orders/db/data/sap.capire.orders-Orders.csv
@@ -1,3 +0,0 @@
-ID;createdAt;createdBy;buyer;OrderNo;currency_code
-7e2f2640-6866-4dcf-8f4d-3027aa831cad;2019-01-31;john.doe@test.com;john.doe@test.com;1;EUR
-64e718c9-ff99-47f1-8ca3-950c850777d4;2019-01-30;jane.doe@test.com;jane.doe@test.com;2;EUR
--- a/orders/db/data/sap.capire.orders-Orders_Items.csv
+++ b/orders/db/data/sap.capire.orders-Orders_Items.csv
@@ -1,4 +0,0 @@
-ID;up__ID;amount;product_ID;title;price
-58040e66-1dcd-4ffb-ab10-fdce32028b79;7e2f2640-6866-4dcf-8f4d-3027aa831cad;1;201;Wuthering Heights;11.11
-64e718c9-ff99-47f1-8ca3-950c850777d4;7e2f2640-6866-4dcf-8f4d-3027aa831cad;1;271;Catweazle;15
-e9641166-e050-4261-bfee-d1e797e6cb7f;64e718c9-ff99-47f1-8ca3-950c850777d4;2;252;Eleonora;28
--- a/orders/db/schema.cds
+++ b/orders/db/schema.cds
@@ -1,23 +1,16 @@
-using { Currency, User, managed, cuid } from '@sap/cds/common';
-namespace sap.capire.orders;
+using { sap.capire.bookshop.Books } from '@capire/bookshop';
+using { Currency, managed, cuid } from '@sap/cds/common';
+namespace sap.capire.bookshop;

 entity Orders : cuid, managed {
  OrderNo  : String @title:'Order Number'; //> readable key
-  Items    : Composition of many Orders_Items on Items.up_ = $self;
-  buyer    : User;
+  Items    : Composition of many OrderItems on Items.parent = $self;
  currency : Currency;
 }

-entity Orders_Items {
-  key ID    : UUID;
-  up_       : Association to Orders;
-  product   : Association to Products @assert.integrity:false; // REVISIT: this is a temporary workaround for a glitch in cds-runtime
+entity OrderItems : cuid {
+  parent    : Association to Orders;
+  book      : Association to Books;
  amount    : Integer;
-  title     : String; //> intentionally replicated as snapshot from product.title
-  price     : Double;
-}
-
-/** This is a stand-in for arbitrary ordered Products */
-entity Products @(cds.persistence.skip:'always') {
-  key ID : String;
+  netAmount : Decimal(9,2);
 }
--- a/orders/index.cds
+++ b/orders/index.cds
@@ -1,6 +0,0 @@
-/*
-  This model controls what gets exposed
-*/
-namespace sap.capire.orders;
-using from './srv/orders-service';
-using from './db/schema';
--- a/orders/package.json
+++ b/orders/package.json
@@ -1,7 +1,4 @@
 {
  "name": "@capire/orders",
-  "version": "1.0.0",
-  "dependencies": {
-    "@sap/cds": ">=4.3.0"
-  }
+  "version": "1.0.0"
 }
--- a/orders/srv/orders-service.cds
+++ b/orders/srv/orders-service.cds
@@ -1,5 +1,6 @@
-using { sap.capire.orders as my } from '../db/schema';
+using { sap.capire.bookshop as my } from '../db/schema';

 service OrdersService {
  entity Orders as projection on my.Orders;
+  entity Books as projection on my.Books;
 }
--- a/orders/srv/orders-service.js
+++ b/orders/srv/orders-service.js
@@ -1,37 +1,21 @@
-const cds = require ('@sap/cds')
-class OrdersService extends cds.ApplicationService {
+const cds = require('@sap/cds')

-  /** register custom handlers */
-  init(){
-    const { Orders_Items:OrderItems } = this.entities
+module.exports = cds.service.impl(function() {

-    this.before ('UPDATE', 'Orders', async function(req) {
-      const { ID, Items } = req.data
-      if (Items) for (let { product_ID, amount } of Items) {
-        const { amount:before } = await cds.tx(req).run (
-          SELECT.one.from (OrderItems, oi => oi.amount) .where ({up__ID:ID, product_ID})
-        )
-        if (amount != before) await this.orderChanged (product_ID, amount-before)
-      }
-    })
+  const { Books } = cds.entities

-    this.before ('DELETE', 'Orders', async function(req) {
-      const { ID } = req.data
-      const Items = await cds.tx(req).run (
-        SELECT.from (OrderItems, oi => { oi.product_ID, oi.amount }) .where ({up__ID:ID})
+  // Reduce stock of ordered books if available stock suffices
+  this.before ('CREATE', 'Orders', (req) => {
+    const { Items: OrderItems } = req.data
+    return cds.transaction(req) .run (()=> OrderItems.map (order =>
+      UPDATE (Books) .where ('ID =', order.book_ID)
+      .and ('stock >=', order.amount)
+      .set ('stock -=', order.amount)
+    )) .then (all => all.forEach ((affectedRows,i) => {
+      if (affectedRows === 0)  req.error (409,
+        `${OrderItems[i].amount} exceeds stock for book #${OrderItems[i].book_ID}`
      )
-      if (Items) await Promise.all (Items.map(it => this.orderChanged (it.product_ID, -it.amount)))
-    })
+    }))
+  })

-    return super.init()
-  }
-
-  /** order changed -> broadcast event */
-  orderChanged (product, deltaAmount) {
-    // Emit events to inform subscribers about changes in orders
-    console.log ('> emitting:', 'OrderChanged', { product, deltaAmount })
-    return this.emit ('OrderChanged', { product, deltaAmount })
-  }
-
-}
-module.exports = OrdersService
+})
--- a/package.json
+++ b/package.json
@@ -5,32 +5,23 @@
  "repository": "https://github.com/sap-samples/cloud-cap-samples.git",
  "author": "daniel.hutzel@sap.com",
  "dependencies": {
-    "@capire/bookshop": "./bookshop",
-    "@capire/common": "./common",
-    "@capire/fiori": "./fiori",
-    "@capire/hello": "./hello",
-    "@capire/media": "./media",
-    "@capire/orders": "./orders",
-    "@capire/reviews": "./reviews"
+    "@capire/bookshop": "file:bookshop",
+    "@capire/common": "file:common",
+    "@capire/fiori": "file:fiori",
+    "@capire/orders": "file:orders",
+    "@capire/reviews": "file:reviews",
+    "@capire/tests": "file:test"
  },
  "devDependencies": {
    "chai": "^4.2.0",
    "chai-as-promised": "^7.1.1",
    "chai-subset": "^1.6.0",
-    "sqlite3": "^5.0.0"
+    "sqlite3": "^4"
  },
  "scripts": {
-    "cleanup": "rm -rf node_modules && rm -rf */node_modules && rm -rf */*/node_modules",
-    "registry": "node .registry/server.js",
-    "bookshop": "cds watch bookshop",
-    "fiori": "cds watch fiori",
-    "media": "cds watch media",
    "mocha": "npx mocha || echo",
-    "jest": "npx jest",
-    "test": "npm run jest --silent"
-  },
-  "mocha": {
-    "parallel": true
+    "jest": "npx jest --verbose",
+    "test": "npm run jest -s"
  },
  "jest": {
    "testEnvironment": "node"
--- a/reviews/.env
+++ b/reviews/.env
@@ -1,2 +1 @@
-cds.requires.messaging.kind = file-based-messaging
-PORT = 4005
+PORT = 5005
--- a/reviews/app/vue/app.js
+++ b/reviews/app/vue/app.js
@@ -1,72 +0,0 @@
-/* global Vue axios */ //> from vue.html
-const $ = sel => document.querySelector(sel)
-const GET = (url) => axios.get('/reviews'+url)
-const PUT = (cmd,data) => axios.patch('/reviews'+cmd,data)
-const POST = (cmd,data) => axios.post('/reviews'+cmd,data)
-
-const reviews = new Vue ({
-
-    el:'#app',
-
-    data: {
-        list: [],
-        review: undefined,
-        message: {},
-        Ratings: Object.entries({
-            5 : '★★★★★',
-            4 : '★★★★',
-            3 : '★★★',
-            2 : '★★',
-            1 : '★',
-        }).reverse()
-    },
-
-    methods: {
-
-        search: ({target:{value:v}}) => reviews.fetch(v && '&$search='+v),
-
-        async fetch (etc='') {
-            const {data} = await GET(`/Reviews?${etc}`)
-            reviews.list = data.value
-        },
-
-        async inspect (eve) {
-            const review = reviews.review = reviews.list [eve.currentTarget.rowIndex-1]
-            const res = await GET(`/Reviews/${review.ID}/text/$value`)
-            review.text = res.data
-            reviews.message = {}
-        },
-
-        newReview () {
-            reviews.review = {}
-            reviews.message = {}
-            setTimeout (()=> $('form > input').focus(), 111)
-        },
-
-        async submitReview () {
-            const review = reviews.review; review.rating = parseInt (review.rating) // REVISIT: Okra should be less strict
-            try {
-                if (!review.ID) {
-                    const res = await POST(`/Reviews`,review)
-                    reviews.ID = res.data.ID
-                } else {
-                    console.trace()
-                    await PUT(`/Reviews/${review.ID}`,review)
-                }
-                reviews.message = { succeeded: 'Your review was submitted successfully. Thanks.' }
-            } catch (e) {
-                reviews.message = { failed: e.response.data.error.message }
-            }
-        }
-
-    },
-
-    filters: {
-        stars: (r) => ('★'.repeat(Math.round(r))+'☆☆☆☆☆').slice(0,5),
-        datetime: (d) => d && new Date(d).toLocaleString(),
-    },
-
-})
-
-// initially fill list of my reviews
-reviews.fetch()
--- a/reviews/app/vue/index.html
+++ b/reviews/app/vue/index.html
@@ -1,62 +0,0 @@
-<!DOCTYPE html>
-<html>
-
-<head>
-    <title> Capire Reviews </title>
-    <link rel="stylesheet" href="https://unpkg.com/primitive-ui/dist/css/main.css">
-    <script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>
-    <script src="https://cdn.jsdelivr.net/npm/vue"></script>
-    <style>
-        .hovering tr:hover td { color:cyan; background: #123; cursor: pointer; }
-        .rating-stars { color:teal }
-        .succeeded { color:teal }
-        .failed { color:red }
-        textarea { line-height: 1.4em;}
-    </style>
-</head>
-
-<body class="small-container", style="margin-top: 70px;">
-<div id='app'>
-
-    <h1> {{ document.title }} </h1>
-
-    <input type="text" placeholder="Search..." @input="search">
-
-    <table id='my-reviews' class="hovering">
-        <thead>
-            <th> Subject </th>
-            <th> Rating </th>
-            <th> Title </th>
-            <th> Date </th>
-        </thead>
-        <tr v-for="review in list" v-bind:id="review.ID" v-on:click="inspect">
-            <td>{{ review.subject }}</td>
-            <td class="rating-stars">{{ review.rating | stars }}</td>
-            <td>{{ review.title }}</td>
-            <td>{{ review.date | datetime }}</td>
-        </tr>
-    </table>
-
-    <button v-on:click="newReview()" class="round-button muted-button">Add Review...</button>
-
-    <form v-if="review" @submit.prevent="submitReview">
-        <input id="subject" type="text" v-model="review.subject" style="font-weight:bold; display:inline; width:20%">
-        <input type="text" v-model="review.title" style="font-weight:bold; display:inline; width:60%">
-        <select v-model="review.rating" style="font-weight:bold; display:inline; width:17%; float: right;">
-            <option v-for="option in Ratings" v-bind:value="option[0]"> {{ option[1] }} </option>
-        </select>
-        <textarea v-model="review.text" rows="9"></textarea>
-        <input type="submit" value="Submit" class="round-button muted-button">
-        <span class="succeeded"> {{ message.succeeded }} </span>
-        <span class="failed"> {{ message.failed }} </span>
-    </form>
-    <div v-else style="margin-top: 2em;">
-        ( click on a row to see details... )
-    </div>
-
-
-</div>
-</body>
-
-<script src="app.js"></script>
-</html>
--- a/reviews/db/data/sap.capire.reviews-Reviews.csv
+++ b/reviews/db/data/sap.capire.reviews-Reviews.csv
@@ -1,5 +0,0 @@
-subject;rating;title;text
-201;5;Intriguing;Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.
-201;4;Fascinating;Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Id diam maecenas ultricies mi eget mauris pharetra et. Risus at ultrices mi tempus imperdiet nulla malesuada pellentesque. Pulvinar mattis nunc sed blandit libero. Facilisis magna etiam tempor orci eu. Nec sagittis aliquam malesuada bibendum arcu. Eu consequat ac felis donec. Ultricies tristique nulla aliquet enim tortor at auctor urna nunc. Tortor posuere ac ut consequat semper viverra nam libero. Amet nisl suscipit adipiscing bibendum est ultricies integer quis auctor. Scelerisque purus semper eget duis at tellus. Elementum tempus egestas sed sed risus pretium. Arcu dictum varius duis at. Amet luctus venenatis lectus magna fringilla urna. Eget velit aliquet sagittis id consectetur purus ut faucibus. Vitae auctor eu augue ut lectus. Fermentum iaculis eu non diam phasellus vestibulum.
-207;2;What is this?;Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Libero justo laoreet sit amet cursus sit amet dictum. Nunc faucibus a pellentesque sit. Dis parturient montes nascetur ridiculus mus mauris vitae ultricies. Enim nunc faucibus a pellentesque. Commodo quis imperdiet massa tincidunt nunc pulvinar sapien. Cras ornare arcu dui vivamus. Facilisi etiam dignissim diam quis enim lobortis. Et molestie ac feugiat sed. Urna neque viverra justo nec ultrices dui. Ullamcorper a lacus vestibulum sed arcu non. Volutpat ac tincidunt vitae semper quis. Dignissim sodales ut eu sem. Feugiat in fermentum posuere urna nec. At augue eget arcu dictum varius.
-251;3;It's dark...;Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Suscipit tellus mauris a diam. Velit aliquet sagittis id consectetur purus ut. Viverra adipiscing at in tellus integer. Vitae elementum curabitur vitae nunc. Mattis ullamcorper velit sed ullamcorper morbi. Diam quis enim lobortis scelerisque. Auctor neque vitae tempus quam pellentesque nec nam aliquam. Semper auctor neque vitae tempus. Quis eleifend quam adipiscing vitae proin. Neque convallis a cras semper auctor neque vitae. Imperdiet massa tincidunt nunc pulvinar sapien et ligula. Sit amet consectetur adipiscing elit ut aliquam purus. Pretium quam vulputate dignissim suspendisse.
--- a/reviews/db/schema.cds
+++ b/reviews/db/schema.cds
@@ -17,7 +17,7 @@ entity Reviews {
  liked    : Integer default 0; // counter for likes as helpful review (count of all _likes belonging to this review)
 }

-type Rating : Integer enum {
+type Rating : Decimal(3,2) enum {
  Best  = 5;
  Good  = 4;
  Avg   = 3;
--- a/reviews/index.cds
+++ b/reviews/index.cds
@@ -1,2 +1 @@
 using from './srv/reviews-service';
-namespace sap.capire.reviews;
--- a/reviews/package.json
+++ b/reviews/package.json
@@ -7,17 +7,20 @@
    "index.cds"
  ],
  "dependencies": {
-    "@sap/cds": ">=4",
+    "@sap/cds": ">=3.33.1",
    "express": "^4.17.1"
  },
  "scripts": {
    "reviews-service": "cds watch",
-    "books-reviewed": "cds watch ../reviewed"
+    "bookshop": "cds watch test/bookshop"
  },
  "cds": {
    "requires": {
      "db": {
        "kind": "sql"
+      },
+      "messaging": {
+        "kind": "file-based-messaging"
      }
    }
  }
--- a/reviews/readme.md
+++ b/reviews/readme.md
@@ -2,23 +2,20 @@

 ## Run all-in-one

-Open a terminal window and run the `fiori` app in it:
-
+Open a terminal window and run the bookshop in it:
 ```sh
-npm run fiori
+npm run bookshop
 ```


-## Run as Separate Services
-
-Open two terminal windows. In the first one start the reviews service stand-alone:
+## Run as separate services

+Open two terminal windows, and in the first one start the reviews service stand-alone:
 ```sh
 npm run reviews-service
 ```

-In the second one start the `fiori` app:
-
+In the the second one start the bookshop:
 ```sh
-npm run fiori
+npm run bookshop
 ```
--- a/reviews/srv/reviews-service.cds
+++ b/reviews/srv/reviews-service.cds
@@ -8,37 +8,30 @@ service ReviewsService {
  action unlike (review: type of Reviews:ID);

  // Async API
-   event reviewed : {
-     subject: type of Reviews:subject;
-     rating: Decimal(2,1)
-   }
+  event reviewed : {
+    subject: type of Reviews:subject;
+    rating: Decimal(2,1)
+  };

  // Input validation
  annotate Reviews with {
    subject  @mandatory;
    title    @mandatory;
-    rating   @assert.range;
+    rating   @mandatory @assert.enum;
  }

 }


 // Access control restrictions
-annotate ReviewsService.Reviews with @restrict:[
+annotate ReviewsService.Reviews with @restrict_:[
  { grant:'READ',   to:'any' },                 // everybody can read reviews
  { grant:'CREATE', to:'authenticated-user' },  // users must login to add reviews
-  /////////////////////////////////////////////////
-  //
-  // Temporarily disabling this due to glitch in CAP Node.js runtime:
-  // { grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
-  // -> reenable it when the issue is fixed
-     { grant:'UPDATE', to:'authenticated-user' },
-  //
-  ////////////////////////////////////////////////////
+  { grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
  { grant:'DELETE', to:'admin' },
 ];

-annotate ReviewsService with @restrict:[
+annotate ReviewsService with @restrict_:[
  { grant:'like', to:'identified-user' },
  { grant:'unlike', to:'identified-user', where:'user=$user' },
 ];
--- a/reviews/srv/reviews-service.js
+++ b/reviews/srv/reviews-service.js
@@ -10,20 +10,23 @@ module.exports = cds.service.impl (function(){
  })

  // Emit an event to inform subscribers about new avg ratings for reviewed subjects
-  this.after (['CREATE','UPDATE','DELETE'], 'Reviews', async function(_,req) {
+  // ( Note: req.on.succeeded ensures we only do that if there's no error )
+  this.after (['CREATE','UPDATE','DELETE'], 'Reviews', async(_,req) => {
    const {subject} = req.data
-    const {rating} = await cds.tx(req) .run (
+    const {rating} = await cds.transaction(req) .run (
      SELECT.one (['round(avg(rating),2) as rating']) .from (Reviews) .where ({subject})
    )
-    global.it || console.log ('< emitting:', 'reviewed', { subject, rating })
-    await this.emit ('reviewed', { subject, rating })
+    req.on ('succeeded', ()=>{
+      global.it || console.log ('< emitting:', 'reviewed', { subject, rating })
+      this.emit ('reviewed', { subject, rating })
+    })
  })

  // Increment counter for reviews considered helpful
  this.on ('like', (req) => {
    if (!req.user)  return req.reject(400, 'You must be identified to like a review')
    const {review} = req.data, {user} = req
-    const tx = cds.tx(req)
+    const tx = cds.transaction(req)
    return tx.run ([
      INSERT.into (Likes) .entries ({review_ID: review, user: user.id}),
      UPDATE (Reviews) .set({liked: {'+=': 1}}) .where({ID:review})
@@ -34,7 +37,7 @@ module.exports = cds.service.impl (function(){
  this.on ('unlike', async (req) => {
    if (!req.user)  return req.reject(400, 'You must be identified to remove a former like of yours')
    const {review} = req.data, {user} = req
-    const tx = cds.tx(req)
+    const tx = cds.transaction(req)
    const affectedRows = await tx.run (DELETE.from (Likes) .where ({review_ID: review,user: user.id}))
    if (affectedRows === 1)  return tx.run (UPDATE (Reviews) .set ({liked: {'-=': 1}}) .where ({ID:review}))
  })
--- a/reviews/test/4004.http
+++ b/reviews/test/4004.http
@@ -0,0 +1,36 @@
+#################################################
+#
+#   To ReviewsService mocked in bookshop process
+#
+
+GET http://localhost:4004/reviews/Reviews?
+
+###
+
+POST http://localhost:4004/reviews/Reviews
+Content-Type: application/json;IEEE754Compatible=true
+
+{"subject":"201", "title":"boo"}
+
+
+
+#################################################
+#
+#   Bookshop Requests involving reviews
+#   (both in-process as well as separate one)
+#
+
+
+### Request to CatalogService > delegated to ReviewsService
+GET http://localhost:4004/browse/Books(201)/reviews?
+&$select=rating,date,reviewer,title
+
+### Alternative OData URL
+GET http://localhost:4004/browse/Books/201/reviews?
+&$select=rating,date,reviewer,title
+
+###
+GET http://localhost:4004/browse/Books(201)?
+&$select=ID,title,rating
+&$expand=reviews
+# Note: the $expand only works in case of ReviewsService in same process
--- a/reviews/test/5005.http
+++ b/reviews/test/5005.http
@@ -0,0 +1,13 @@
+#################################################
+#
+#   To ReviewsService running as separate process
+#
+
+GET http://localhost:5005/reviews/Reviews?
+
+###
+
+POST http://localhost:5005/reviews/Reviews
+Content-Type: application/json;IEEE754Compatible=true
+
+{"subject":"201", "title":"boo"}
--- a/reviews/test/bookshop/package.json
+++ b/reviews/test/bookshop/package.json
@@ -0,0 +1,23 @@
+{
+  "name": "@capire/bookshop-with-reviews",
+  "version": "1.0.0",
+  "dependencies": {
+    "@capire/bookshop": "../../../bookshop",
+    "@capire/reviews": "..",
+    "@sap/cds": "^3.33.1",
+    "express": "^4.17.1"
+  },
+  "cds": {
+    "requires": {
+      "db": {
+        "kind": "sql"
+      },
+      "ReviewsService": {
+        "kind": "odata", "model": "@capire/reviews"
+      },
+      "messaging": {
+        "kind": "file-based-messaging"
+      }
+    }
+  }
+}
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				`exports.CatalogService = require('./srv/cat-service')`