/sap-bw-query

name: sap-bw-query
description: Use when automating SAP BW query inspection, InfoProvider metadata reads (characteristics, key figures), metadata-verified specification review, unsaved draft preparation, or human-confirmed query draft population through Eclipse or HANA Studio with BW Modeling Tools.
license: GPL-3.0
allowed-tools:
  - Read
  - Grep
  - Glob
  - Bash
metadata:
  maintainer: "Eduard Jiglau"
  maintainer_email: "hello@sap-ai-skills.com"
  website: "https://sap-ai-skills.com"
  version: "2.4.1"
  last_verified: "2026-07-17"
  eclipse_version: "4.40"
  bwmt_version: "1.27.36"
  java_version: "21.0.11"
  node_version: "24.18.0"
  verification_scope: "public source/package evidence, signature-level BWMT API inspection, local unit tests, signed fixture deployment, and Eclipse compile only; live BW system validation pending per docs/project/sap-bw-query-live-validation-runbook.md"

SAP BW Query Automation Studio

Use the bundled Windows Eclipse workspace for password-safe SAP BW query inspection and local draft preparation. Existing BW queries are read-only. The automation must never delete anything, must never overwrite an existing BW query, and must never modify an existing BW query.

Non-negotiable safety contract

Passwords are never accepted by the automation.

If a password or other credential is pasted:

1. Stop processing the supplied content. Do not repeat, validate, use, store, or log it. 2. Respond: "Do not paste passwords into AI. Treat the exposed password as compromised and rotate it immediately. Revoke related sessions if applicable, and do not reuse the password." 3. Explain that the automation cannot retroactively erase content already submitted to an external chat system. 4. Continue only after the user supplies password-free connection metadata. If authentication is required, pause at the native SAP login dialog.

Never expose a tool, workaround, raw command, UI recording step, or configuration field that accepts a password, secret, credential, API key, or authentication token. Never capture a secure text control.

Existing queries remain read-only. Create only unsaved local drafts. Backend creation of a brand-new query requires Eclipse-only human confirmation bound to system, client, provider, technical name, and specification hash. The automation does not press the native SAP wizard's Finish button.

Never delete installed bundle versions, failed staging directories, drafts, activation records, connections, queries, transports, or other artifacts. Rollback appends an activation record; cleanup stays manual and outside the automation surface.

When to Use This Skill

Use this skill for:

• Deploying or launching the no-install Windows Eclipse/BWMT bundle.
• Configuring password-free SAP Logon/BW connection metadata or using SNC/SSO.
• Inspecting capabilities, providers, or existing open queries read-only.
• Reading InfoProvider metadata (characteristics with dimension groups, key figures) read-only through `bw_describe_provider`.
• Converting a business specification into `QuerySpec v1` and verifying every referenced name against the provider metadata.
• Finding specification gaps and suggesting optimizations without changing business meaning.
• Creating, revising, previewing, or preparing a brand-new unsaved query draft.
• Populating the wizard-created, still-unsaved query editor from the confirmed draft (axes, structures, restricted/formula key figures, filters, variables, conditions, exceptions, zero suppression); the human reviews and saves.
• Reviewing a draft spec or an existing open query against BW query-design best practices read-only — `bw_review_query` for an open query, or the additive `bestPractices` array from `bw_resolve_and_validate_spec` for a draft — grouped by severity against `references/query-design-rules.md`.
• Producing business-readable documentation of an existing open query (purpose, axes, key figure definitions with decoded formulas/restrictions, filters, variables, conditions/exceptions, settings) from the deep-read model read-only, flagging any `serializationIssues` as unconfirmed.

Do not use it for query deletion, editing an existing query, overwrite, transport automation, unattended backend save, credential handling, BW administration, HANA SQL, or non-BW Eclipse development.

Quick Start

1. State before connection work: "Passwords are never accepted. Enter credentials only in the native SAP login dialog." 2. From the plug-in's top-level scripts directory, run `BwStudio.ps1 -Action Status -Json`. 3. If absent, deploy the local bundle directly; it needs no signing or installer. An optional remote release channel remains signature-gated. Read `references/deployment-and-trust.md` first. When you build the bundle yourself with `bundle/Build-BwStudio.ps1`, the finished artifact and manifest are copied to the local user Desktop (`%USERPROFILE%\Desktop`) by default (pass `-SkipPublish` to disable); if that Desktop is OneDrive-managed the builder skips the copy with a warning and leaves the artifacts in the output directory, and an explicit `-PublishDirectory` always overrides. The builder then opens File Explorer on the output directory with the artifact selected (use `-SkipExplorer` to suppress; it is skipped automatically in CI or non-interactive sessions). 4. From that directory, run `BwStudio.ps1 -Action Launch -Json`. The launcher always supplies `-noPwdStore`. Each deploy also writes two desktop shortcuts to the visible desktop for manual starts — `SAP BW Automation Studio (kein Passwortspeicher)` (adds `-noPwdStore`, recommended) and `... (mit Passwortspeicher)` (Eclipse's own secure store may remember credentials); both only affect the manual human login, never the automation surface. The installed studio itself lives under `%LOCALAPPDATA%\BWAutomationStudio` (per-user, no-admin, portable). 5. Prepare/import connection metadata with the MCP tools. Use SNC/SSO when available; otherwise pause for native SAP lo