fix: Consider codelists readonly

CHANGELOG.md

@@ -11,6 +11,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/).
 ### Deprecated
 ### Removed
 ### Fixed
+- Entities that are transitively autoexposed and should still be considered readonly, do not generate documentation for write endpoints anymore
 ### Security
 
 ## [1.6.0] - 2026-08-04

lib/compile/csdl2openapi.js

@@ -90,7 +90,7 @@
  * @param {{ url?: string, servers?: object, odataVersion?: string, scheme?: string, host?: string, basePath?: string, diagram?: boolean, maxLevels?: number, shortActionPaths?: boolean }} options Optional parameters
  * @return {*} OpenAPI description
  */
 module.exports.csdl2openapi = function (
     csdl,
     {
         url: serviceRoot,
@@ -125,8 +125,7 @@
                 const type = fullTypeName.startsWith(`${serviceName}.`)
                     ? fullTypeName.substring(serviceName.length + 1)
                     : nameParts(fullTypeName).name;
-                if ((csdl[serviceName]?.[type]?.['@cds.autoexpose'] || csdl[serviceName]?.[type]?.['@cds.autoexposed'])
-                    && (!entityContainer[type] || type.endsWith('_texts'))) {
+                if (csdl[serviceName]?.[type]?.['@cds.autoexpose'] || csdl[serviceName]?.[type]?.['@cds.autoexposed']) {
                     entityContainer[element]['$cds.autoexpose'] = true;
                 }
             }
@@ -472,7 +471,7 @@
      * @param {number} options.level Number of navigation segments so far
      * @param {string} options.navigationPath Path for finding navigation restrictions
      */
     function pathItems({ paths, prefix, prefixParameters, element, root, sourceName, targetName, target, level, navigationPath }) {
         const name = prefix.substring(prefix.lastIndexOf('/') + 1);
         const type = meta.modelElement(element.$Type);
         const pathItem = {};
@@ -750,7 +749,7 @@
      * @param {boolean} options.byKey Read by key
      * @param {array} options.nonExpandable Non-expandable navigation properties
      */
     function operationRead({ pathItem, element, name, sourceName, targetName, target, level, restrictions, byKey, nonExpandable }) {
         const targetRestrictions = target?.[meta.voc.Capabilities.ReadRestrictions];
         const readRestrictions = restrictions.ReadRestrictions || targetRestrictions || {};
         const readByKeyRestrictions = readRestrictions.ReadByKeyRestrictions;
@@ -1220,7 +1219,7 @@
      * @param {*} options.restrictions Navigation property restrictions of navigation segment
      * @param {boolean} [options.byKey=false] Update by key
      */
     function operationUpdate({ pathItem, element, name, sourceName, target, level, restrictions, byKey = false }) {
         const updateRestrictions = restrictions.UpdateRestrictions || target?.[meta.voc.Capabilities.UpdateRestrictions] || {};
         const countRestrictions = target?.[meta.voc.Capabilities.CountRestrictions]?.Countable === false;
         if (updateRestrictions.Updatable !== false && !element[meta.voc.Core.Immutable]) {
@@ -1311,7 +1310,7 @@
      */
     function pathItemsForMediaStream({ paths, prefix, prefixParameters, type, name, sourceName }) {
         if (type.$HasStream) {
             const mediaTypes = type[meta.voc.Core.AcceptableMediaTypes]?.map(t => t['$EnumMember'] ?? t) ?? [];
             const contentTypes = mediaTypes.length > 0 ? mediaTypes : ['*/*'];
             const mediaContent = Object.fromEntries(contentTypes.map(ct => [ct, { schema: { type: 'string', format: 'binary' } }]));
             const lname = splitName(name);
@@ -1641,7 +1640,7 @@
      * @param {string} options.sourceName Name of path source
      * @param {*} [options.actionImport={}] Action import
      */
     function pathItemAction({ paths, prefix, prefixParameters, actionName, overload, sourceName, actionImport = {} }) {
         const name = actionName.indexOf('.') === -1 ? actionName : nameParts(actionName).name;
         const pathItem = {
             post: {
@@ -1731,7 +1730,7 @@
      * @param {string} options.sourceName Name of path source
      * @param {*} [options.functionImport={}] Function Import
      */
     function pathItemFunction({ paths, prefix, prefixParameters, functionName, overload, sourceName, functionImport = {} }) {
         const name = functionName.indexOf('.') === -1 ? functionName : nameParts(functionName).name;
         let parameters = overload.$Parameter || [];
         if (overload.$IsBound) parameters = parameters.slice(1);
@@ -1740,7 +1739,7 @@
 
         const implicitAliases = csdl.$Version > '4.0' || parameters.some(p => p[meta.voc.Core.OptionalParameter]);
 
         parameters.forEach(p => {
             const description = getDescriptionWithFallback(p);
             /** @type {Parameter} */
             const param = {
@@ -2120,7 +2119,7 @@
      * @param {string} options.suffix Suffix for read/create/update
      * @return {*} Map of Schemas Objects
      */
     function schemasForStructuredType({ schemas, qualifier, name, type, suffix }) {
         const schemaName = `${qualifier}.${name}${suffix}`;
         const baseName = `${qualifier}.${name}`;
         const isKey = keyMap(type);
@@ -2136,7 +2135,7 @@
         const properties = propertiesOfStructuredType(type);
         const expandRestrictions = type[meta.voc.Capabilities.ExpandRestrictions] ?? {};
         const nonExpandableProperties = expandRestrictions.NonExpandableProperties ?? [];
         Object.keys(properties).forEach(iName => {
             if (nonExpandableProperties.includes(iName)) {
                 return;
             }

test/lib/compile/csdl2openapi.test.js

@@ -49,6 +49,9 @@ const result11 = require("./data/description-fallback.openapi3.json");
 const example12 = require("./data/autoexposed-texts.json");
 const result12 = require("./data/autoexposed-texts.openapi3.json");
 
+const example13 = require("./data/autoexposed-direct.json");
+const result13 = require("./data/autoexposed-direct.openapi3.json");
+
 describe("Examples", () => {
   test("csdl-16.1", () => {
     const openapi = lib.csdl2openapi(example1, { diagram: true });
@@ -103,6 +106,11 @@ describe("Examples", () => {
     const openapi = lib.csdl2openapi(example12);
     check(openapi, result12);
   });
+
+  test("autoexposed-direct", () => {
+    const openapi = lib.csdl2openapi(example13, { url: "https://localhost/service-root" });
+    check(openapi, result13);
+  });
 });
 
 describe("Edge cases", () => {

test/lib/compile/data/autoexposed-direct.json

@@ -0,0 +1,46 @@
+{
+  "$Version": "4.01",
+  "$EntityContainer": "MyService.EntityContainer",
+  "$Reference": {},
+  "MyService": {
+    "$Kind": "Schema",
+    "EntityContainer": {
+      "$Kind": "EntityContainer",
+      "Orders": {
+        "$Collection": true,
+        "$Type": "MyService.Orders",
+        "$NavigationPropertyBinding": {
+          "status": "ScanStates"
+        }
+      },
+      "ScanStates": {
+        "$Collection": true,
+        "$Type": "MyService.ScanStates"
+      }
+    },
+    "Orders": {
+      "$Kind": "EntityType",
+      "$Key": ["ID"],
+      "ID": {
+        "$Type": "Edm.Int32"
+      },
+      "status": {
+        "$Kind": "NavigationProperty",
+        "$Type": "MyService.ScanStates",
+        "$Nullable": true
+      }
+    },
+    "ScanStates": {
+      "$Kind": "EntityType",
+      "$Key": ["code"],
+      "@cds.autoexpose": true,
+      "code": {
+        "$MaxLength": 255
+      },
+      "descr": {
+        "$Nullable": true,
+        "$MaxLength": 1000
+      }
+    }
+  }
+}