@babamba2/mcp-abap-connection 1.5.3

package/dist/connection/BaseAbapConnection.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseAbapConnection = void 0;
+const axios_1 = require("axios");
+const AbstractAbapConnection_js_1 = require("./AbstractAbapConnection.js");
+/**
+ * Basic Authentication connection for on-premise SAP systems
+ */
+class BaseAbapConnection extends AbstractAbapConnection_js_1.AbstractAbapConnection {
+    constructor(config, logger, sessionId, options) {
+        BaseAbapConnection.validateConfig(config);
+        super(config, logger || null, sessionId, options);
+    }
+    /**
+     * Connect to SAP system with Basic Auth
+     * Fetches CSRF token which also establishes session cookies
+     */
+    async connect() {
+        const baseUrl = await this.getBaseUrl();
+        const discoveryUrl = `${baseUrl}/sap/bc/adt/discovery`;
+        this.logger?.debug(`[DEBUG] BaseAbapConnection - Connecting to SAP system: ${discoveryUrl}`);
+        try {
+            // Try to get CSRF token (this will also get cookies)
+            const token = await this.fetchCsrfToken(discoveryUrl, 3, 1000);
+            this.setCsrfToken(token);
+            this.logger?.debug('Successfully connected to SAP system', {
+                hasCsrfToken: !!this.getCsrfToken(),
+                hasCookies: !!this.getCookies(),
+                cookieLength: this.getCookies()?.length || 0,
+            });
+        }
+        catch (error) {
+            // For Basic auth, log warning but don't fail
+            // The retry logic in makeAdtRequest will handle transient errors automatically
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            this.logger?.warn(`[WARN] BaseAbapConnection - Could not connect to SAP system upfront: ${errorMsg}. Will retry on first request.`);
+            // Still try to extract cookies from error response if available
+            if (error instanceof axios_1.AxiosError && error.response?.headers) {
+                // updateCookiesFromResponse is private, but cookies are extracted in fetchCsrfToken
+                if (this.getCookies()) {
+                    this.logger?.debug(`[DEBUG] BaseAbapConnection - Cookies extracted from error response during connect (first 100 chars): ${this.getCookies()?.substring(0, 100)}...`);
+                }
+            }
+        }
+    }
+    buildAuthorizationHeader() {
+        const { username, password } = this.getConfig();
+        const safeUsername = username ?? '';
+        const safePassword = password ?? '';
+        const token = Buffer.from(`${safeUsername}:${safePassword}`).toString('base64');
+        return `Basic ${token}`;
+    }
+    static validateConfig(config) {
+        if (config.authType !== 'basic') {
+            throw new Error(`Basic authentication connection expects authType "basic", got "${config.authType}"`);
+        }
+        if (!config.username || !config.password) {
+            throw new Error('Basic authentication requires both username and password');
+        }
+        if (!config.client) {
+            throw new Error('Basic authentication requires SAP_CLIENT to be provided');
+        }
+    }
+}
+exports.BaseAbapConnection = BaseAbapConnection;

package/dist/connection/GenericWebSocketTransport.d.ts

@@ -0,0 +1,46 @@
+import type { IWebSocketCloseInfo, IWebSocketConnectOptions, IWebSocketMessageEnvelope, IWebSocketMessageHandler, IWebSocketTransport } from '@babamba2/mcp-abap-adt-interfaces';
+/**
+ * Minimal WS-like instance contract to avoid hard dependency on a specific WS library.
+ */
+interface IWebSocketLike {
+    readyState: number;
+    send(data: string): void;
+    close(code?: number, reason?: string): void;
+    onopen: ((event: unknown) => void) | null;
+    onmessage: ((event: {
+        data: unknown;
+    }) => void) | null;
+    onerror: ((event: unknown) => void) | null;
+    onclose: ((event: {
+        code?: number;
+        reason?: string;
+        wasClean?: boolean;
+    }) => void) | null;
+}
+interface IWebSocketFactory {
+    create(url: string, protocols?: string | string[], options?: IWebSocketConnectOptions): IWebSocketLike;
+}
+export declare class GenericWebSocketTransport implements IWebSocketTransport {
+    private readonly factory;
+    private socket;
+    private messageHandlers;
+    private openHandlers;
+    private errorHandlers;
+    private closeHandlers;
+    constructor(factory: IWebSocketFactory);
+    connect(url: string, options?: IWebSocketConnectOptions): Promise<void>;
+    disconnect(code?: number, reason?: string): Promise<void>;
+    send<T = unknown>(message: IWebSocketMessageEnvelope<T>): Promise<void>;
+    onMessage<T = unknown>(handler: IWebSocketMessageHandler<T>): void;
+    onOpen(handler: () => void | Promise<void>): void;
+    onError(handler: (error: Error) => void | Promise<void>): void;
+    onClose(handler: (info: IWebSocketCloseInfo) => void | Promise<void>): void;
+    isConnected(): boolean;
+    private handleIncomingMessage;
+    private normalizeError;
+    private emitOpen;
+    private emitError;
+    private emitClose;
+}
+export type { IWebSocketFactory, IWebSocketLike };
+//# sourceMappingURL=GenericWebSocketTransport.d.ts.map

package/dist/connection/GenericWebSocketTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericWebSocketTransport.d.ts","sourceRoot":"","sources":["../../src/connection/GenericWebSocketTransport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,OAAO,EACH,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GACzE,IAAI,CAAC;CACV;AAED,UAAU,iBAAiB;IACzB,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,wBAAwB,GACjC,cAAc,CAAC;CACnB;AAID,qBAAa,yBAA0B,YAAW,mBAAmB;IASvD,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,eAAe,CAAgD;IACvE,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,aAAa,CAAqD;IAC1E,OAAO,CAAC,aAAa,CAEd;gBAEsB,OAAO,EAAE,iBAAiB;IAEjD,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC;IAqDV,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzD,IAAI,CAAC,CAAC,GAAG,OAAO,EACpB,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC;IAQhB,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAAG,IAAI;IAIlE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjD,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI9D,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI3E,WAAW,IAAI,OAAO;YAIR,qBAAqB;IAoBnC,OAAO,CAAC,cAAc;YAUR,QAAQ;YAMR,SAAS;YAMT,SAAS;CAKxB;AAED,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC"}

package/dist/connection/GenericWebSocketTransport.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericWebSocketTransport = void 0;
+const WS_OPEN = 1;
+class GenericWebSocketTransport {
+    factory;
+    socket = null;
+    messageHandlers = [];
+    openHandlers = [];
+    errorHandlers = [];
+    closeHandlers = [];
+    constructor(factory) {
+        this.factory = factory;
+    }
+    async connect(url, options) {
+        if (this.socket && this.isConnected()) {
+            return;
+        }
+        const connectTimeoutMs = options?.connectTimeoutMs ?? 15000;
+        const socket = this.factory.create(url, options?.protocols, options);
+        this.socket = socket;
+        await new Promise((resolve, reject) => {
+            const timeoutId = setTimeout(() => {
+                reject(new Error(`WebSocket connect timeout after ${connectTimeoutMs}ms`));
+            }, connectTimeoutMs);
+            socket.onopen = () => {
+                clearTimeout(timeoutId);
+                this.emitOpen().catch(() => {
+                    // no-op
+                });
+                resolve();
+            };
+            socket.onerror = (event) => {
+                clearTimeout(timeoutId);
+                const err = this.normalizeError(event, 'WebSocket connection error');
+                this.emitError(err).catch(() => {
+                    // no-op
+                });
+                reject(err);
+            };
+            socket.onclose = (event) => {
+                clearTimeout(timeoutId);
+                const info = {
+                    code: typeof event?.code === 'number' ? event.code : 1006,
+                    reason: event?.reason,
+                    wasClean: event?.wasClean,
+                };
+                this.emitClose(info).catch(() => {
+                    // no-op
+                });
+            };
+            socket.onmessage = (event) => {
+                this.handleIncomingMessage(event?.data).catch(() => {
+                    // no-op
+                });
+            };
+        });
+    }
+    async disconnect(code, reason) {
+        if (!this.socket) {
+            return;
+        }
+        const socket = this.socket;
+        this.socket = null;
+        try {
+            socket.close(code, reason);
+        }
+        catch (error) {
+            const err = this.normalizeError(error, 'WebSocket close failed');
+            await this.emitError(err);
+        }
+    }
+    async send(message) {
+        if (!this.socket || this.socket.readyState !== WS_OPEN) {
+            throw new Error('WebSocket is not connected');
+        }
+        this.socket.send(JSON.stringify(message));
+    }
+    onMessage(handler) {
+        this.messageHandlers.push(handler);
+    }
+    onOpen(handler) {
+        this.openHandlers.push(handler);
+    }
+    onError(handler) {
+        this.errorHandlers.push(handler);
+    }
+    onClose(handler) {
+        this.closeHandlers.push(handler);
+    }
+    isConnected() {
+        return !!this.socket && this.socket.readyState === WS_OPEN;
+    }
+    async handleIncomingMessage(rawData) {
+        try {
+            const text = typeof rawData === 'string'
+                ? rawData
+                : rawData instanceof Buffer
+                    ? rawData.toString('utf8')
+                    : String(rawData ?? '');
+            const parsed = JSON.parse(text);
+            for (const handler of this.messageHandlers) {
+                await handler(parsed);
+            }
+        }
+        catch (error) {
+            await this.emitError(this.normalizeError(error, 'Failed to process WS message'));
+        }
+    }
+    normalizeError(error, fallback) {
+        if (error instanceof Error) {
+            return error;
+        }
+        if (typeof error === 'string' && error.trim()) {
+            return new Error(error.trim());
+        }
+        return new Error(fallback);
+    }
+    async emitOpen() {
+        for (const handler of this.openHandlers) {
+            await handler();
+        }
+    }
+    async emitError(error) {
+        for (const handler of this.errorHandlers) {
+            await handler(error);
+        }
+    }
+    async emitClose(info) {
+        for (const handler of this.closeHandlers) {
+            await handler(info);
+        }
+    }
+}
+exports.GenericWebSocketTransport = GenericWebSocketTransport;

package/dist/connection/JwtAbapConnection.d.ts

@@ -0,0 +1,37 @@
+import type { IAdtResponse, ITokenRefresher } from '@babamba2/mcp-abap-adt-interfaces';
+import type { SapConfig } from '../config/sapConfig.js';
+import type { ILogger } from '../logger.js';
+import type { AbapRequestOptions } from './AbapConnection.js';
+import { AbstractAbapConnection } from './AbstractAbapConnection.js';
+/**
+ * JWT Authentication connection for SAP BTP Cloud systems
+ *
+ * Supports automatic token refresh via ITokenRefresher injection:
+ * - If tokenRefresher is provided, 401/403 errors trigger automatic token refresh
+ * - If tokenRefresher is not provided, 401/403 errors throw an error (legacy behavior)
+ */
+export declare class JwtAbapConnection extends AbstractAbapConnection {
+    private tokenRefresher?;
+    private currentToken;
+    constructor(config: SapConfig, logger?: ILogger | null, sessionId?: string, tokenRefresher?: ITokenRefresher);
+    protected buildAuthorizationHeader(): string;
+    /**
+     * Refresh the JWT token using the injected tokenRefresher
+     * @returns true if token was refreshed, false if no refresher available
+     */
+    private tryRefreshToken;
+    /**
+     * Override connect to handle JWT token refresh on errors
+     */
+    connect(): Promise<void>;
+    /**
+     * Override makeAdtRequest to handle JWT auth errors with automatic token refresh
+     */
+    makeAdtRequest<T = any, D = any>(options: AbapRequestOptions): Promise<IAdtResponse<T, D>>;
+    /**
+     * Override fetchCsrfToken to handle JWT auth errors with automatic token refresh
+     */
+    protected fetchCsrfToken(url: string, retryCount?: number, retryDelay?: number): Promise<string>;
+    private static validateConfig;
+}
+//# sourceMappingURL=JwtAbapConnection.d.ts.map

package/dist/connection/JwtAbapConnection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtAbapConnection.d.ts","sourceRoot":"","sources":["../../src/connection/JwtAbapConnection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,sBAAsB;IAC3D,OAAO,CAAC,cAAc,CAAC,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAS;gBAG3B,MAAM,EAAE,SAAS,EACjB,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,eAAe;IAWlC,SAAS,CAAC,wBAAwB,IAAI,MAAM;IAW5C;;;OAGG;YACW,eAAe;IA0B7B;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyD9B;;OAEG;IACG,cAAc,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAyD9B;;OAEG;cACa,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,SAAI,EACd,UAAU,SAAO,GAChB,OAAO,CAAC,MAAM,CAAC;IA2ClB,OAAO,CAAC,MAAM,CAAC,cAAc;CAa9B"}

package/dist/connection/JwtAbapConnection.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAbapConnection = void 0;
+const axios_1 = require("axios");
+const AbstractAbapConnection_js_1 = require("./AbstractAbapConnection.js");
+/**
+ * JWT Authentication connection for SAP BTP Cloud systems
+ *
+ * Supports automatic token refresh via ITokenRefresher injection:
+ * - If tokenRefresher is provided, 401/403 errors trigger automatic token refresh
+ * - If tokenRefresher is not provided, 401/403 errors throw an error (legacy behavior)
+ */
+class JwtAbapConnection extends AbstractAbapConnection_js_1.AbstractAbapConnection {
+    tokenRefresher;
+    currentToken;
+    constructor(config, logger, sessionId, tokenRefresher) {
+        JwtAbapConnection.validateConfig(config);
+        super(config, logger || null, sessionId);
+        this.tokenRefresher = tokenRefresher;
+        if (!config.jwtToken) {
+            throw new Error('jwtToken is required for JwtAbapConnection');
+        }
+        this.currentToken = config.jwtToken;
+    }
+    buildAuthorizationHeader() {
+        // Use currentToken which may have been refreshed
+        const tokenPreview = this.currentToken
+            ? `${this.currentToken.substring(0, 10)}...${this.currentToken.substring(Math.max(0, this.currentToken.length - 4))}`
+            : 'null';
+        this.logger?.debug(`[DEBUG] JwtAbapConnection.buildAuthorizationHeader - Using token: ${tokenPreview}`);
+        return `Bearer ${this.currentToken}`;
+    }
+    /**
+     * Refresh the JWT token using the injected tokenRefresher
+     * @returns true if token was refreshed, false if no refresher available
+     */
+    async tryRefreshToken() {
+        if (!this.tokenRefresher) {
+            this.logger?.debug(`[DEBUG] JwtAbapConnection - No tokenRefresher available, cannot refresh token`);
+            return false;
+        }
+        try {
+            this.logger?.debug(`[DEBUG] JwtAbapConnection - Refreshing token via tokenRefresher...`);
+            const newToken = await this.tokenRefresher.refreshToken();
+            this.currentToken = newToken;
+            this.logger?.debug(`[DEBUG] JwtAbapConnection - Token refreshed successfully`);
+            return true;
+        }
+        catch (error) {
+            this.logger?.error(`[ERROR] JwtAbapConnection - Failed to refresh token: ${error instanceof Error ? error.message : String(error)}`);
+            return false;
+        }
+    }
+    /**
+     * Override connect to handle JWT token refresh on errors
+     */
+    async connect() {
+        const baseUrl = await this.getBaseUrl();
+        const discoveryUrl = `${baseUrl}/sap/bc/adt/discovery`;
+        this.logger?.debug(`[DEBUG] JwtAbapConnection - Connecting to SAP system: ${discoveryUrl}`);
+        try {
+            // Try to get CSRF token (this will also get cookies)
+            const token = await this.fetchCsrfToken(discoveryUrl, 3, 1000);
+            this.setCsrfToken(token);
+            this.logger?.debug('Successfully connected to SAP system', {
+                hasCsrfToken: !!this.getCsrfToken(),
+                hasCookies: !!this.getCookies(),
+                cookieLength: this.getCookies()?.length || 0,
+            });
+        }
+        catch (error) {
+            // Handle JWT auth errors (401/403) during connect
+            if (error instanceof axios_1.AxiosError &&
+                (error.response?.status === 401 || error.response?.status === 403)) {
+                // Check if this is really an auth error, not a permissions error
+                const responseData = error.response?.data;
+                const responseText = typeof responseData === 'string'
+                    ? responseData
+                    : JSON.stringify(responseData || '');
+                // Don't retry on "No Access" errors
+                if (responseText.includes('ExceptionResourceNoAccess') ||
+                    responseText.includes('No authorization') ||
+                    responseText.includes('Missing authorization')) {
+                    throw error;
+                }
+                // Try to refresh token if tokenRefresher is available
+                if (await this.tryRefreshToken()) {
+                    // Retry connect with new token
+                    this.logger?.debug(`[DEBUG] JwtAbapConnection - Retrying connect after token refresh...`);
+                    return this.connect();
+                }
+                throw new Error('JWT token has expired. Please re-authenticate.');
+            }
+            // Re-throw other errors
+            throw error;
+        }
+    }
+    /**
+     * Override makeAdtRequest to handle JWT auth errors with automatic token refresh
+     */
+    async makeAdtRequest(options) {
+        this.logger?.debug(`[DEBUG] JwtAbapConnection.makeAdtRequest - Starting request: ${options.method} ${options.url}`);
+        try {
+            const response = await super.makeAdtRequest(options);
+            this.logger?.debug(`[DEBUG] JwtAbapConnection.makeAdtRequest - Request succeeded: ${response.status}`);
+            return response;
+        }
+        catch (error) {
+            this.logger?.debug(`[DEBUG] JwtAbapConnection.makeAdtRequest - Request failed: ${error instanceof Error ? error.message : String(error)}`);
+            // Handle JWT auth errors (401/403)
+            if (error instanceof axios_1.AxiosError &&
+                (error.response?.status === 401 || error.response?.status === 403)) {
+                this.logger?.debug(`[DEBUG] JwtAbapConnection.makeAdtRequest - Got ${error.response.status}, attempting token refresh...`);
+                // Check if this is really an auth error, not a permissions error
+                const responseData = error.response?.data;
+                const responseText = typeof responseData === 'string'
+                    ? responseData
+                    : JSON.stringify(responseData || '');
+                // Don't retry on "No Access" errors - these are permission issues, not auth issues
+                if (responseText.includes('ExceptionResourceNoAccess') ||
+                    responseText.includes('No authorization') ||
+                    responseText.includes('Missing authorization')) {
+                    throw error;
+                }
+                // Try to refresh token if tokenRefresher is available
+                if (await this.tryRefreshToken()) {
+                    // Reset connection state and retry request with new token
+                    this.logger?.debug(`[DEBUG] JwtAbapConnection.makeAdtRequest - Retrying request after token refresh...`);
+                    this.reset();
+                    return super.makeAdtRequest(options);
+                }
+                throw new Error('JWT token has expired. Please re-authenticate.');
+            }
+            throw error;
+        }
+    }
+    /**
+     * Override fetchCsrfToken to handle JWT auth errors with automatic token refresh
+     */
+    async fetchCsrfToken(url, retryCount = 3, retryDelay = 1000) {
+        try {
+            // Try to fetch CSRF token using parent implementation
+            return await super.fetchCsrfToken(url, retryCount, retryDelay);
+        }
+        catch (error) {
+            // Handle JWT auth errors (401/403) during CSRF token fetch
+            if (error instanceof axios_1.AxiosError &&
+                (error.response?.status === 401 || error.response?.status === 403)) {
+                // Check if this is really an auth error, not a permissions error
+                const responseData = error.response?.data;
+                const responseText = typeof responseData === 'string'
+                    ? responseData
+                    : JSON.stringify(responseData || '');
+                // Don't retry on "No Access" errors
+                if (responseText.includes('ExceptionResourceNoAccess') ||
+                    responseText.includes('No authorization') ||
+                    responseText.includes('Missing authorization')) {
+                    throw error;
+                }
+                // Try to refresh token if tokenRefresher is available
+                if (await this.tryRefreshToken()) {
+                    // Retry CSRF token fetch with new token
+                    this.logger?.debug(`[DEBUG] JwtAbapConnection.fetchCsrfToken - Retrying after token refresh...`);
+                    return super.fetchCsrfToken(url, retryCount, retryDelay);
+                }
+                throw new Error('JWT token has expired. Please re-authenticate.');
+            }
+            // Re-throw other errors
+            throw error;
+        }
+    }
+    static validateConfig(config) {
+        if (config.authType !== 'jwt') {
+            throw new Error(`JWT connection expects authType "jwt", got "${config.authType}"`);
+        }
+        if (!config.jwtToken) {
+            throw new Error('JWT authentication requires SAP_JWT_TOKEN to be provided');
+        }
+    }
+}
+exports.JwtAbapConnection = JwtAbapConnection;

package/dist/connection/RfcAbapConnection.d.ts

@@ -0,0 +1,49 @@
+import type { IAbapRequestOptions, IAdtResponse } from '@babamba2/mcp-abap-adt-interfaces';
+import type { SapConfig } from '../config/sapConfig.js';
+import type { ILogger } from '../logger.js';
+import type { AbapConnection } from './AbapConnection.js';
+/**
+ * RFC-based connection for on-premise SAP systems.
+ *
+ * Uses node-rfc to call SADT_REST_RFC_ENDPOINT — the same standard SAP FM
+ * that Eclipse ADT uses for all on-premise ADT operations via JCo.
+ *
+ * RFC connections are inherently stateful: one ABAP session persists for the
+ * entire connection lifetime. This solves the HTTP 423 "invalid lock handle"
+ * problem on legacy systems (BASIS < 7.50) where HTTP stateful sessions
+ * are not supported.
+ *
+ * Connection parameters are derived from the standard ISapConfig.url field:
+ *   http://saphost:8000 → ashost=saphost, sysnr=00
+ *
+ * Prerequisites:
+ *   - SAP NW RFC SDK installed on the machine
+ *   - node-rfc package installed: npm install node-rfc
+ */
+export declare class RfcAbapConnection implements AbapConnection {
+    private readonly config;
+    private readonly logger;
+    private rfcClient;
+    private readonly sessionId;
+    private readonly baseUrl;
+    private readonly rfcParams;
+    private sessionType;
+    private sessionCookie;
+    constructor(config: SapConfig, logger?: ILogger | null);
+    connect(): Promise<void>;
+    getBaseUrl(): Promise<string>;
+    getSessionId(): string | null;
+    setSessionType(type: 'stateful' | 'stateless'): void;
+    makeAdtRequest<T = any, D = any>(options: IAbapRequestOptions): Promise<IAdtResponse<T, D>>;
+    /**
+     * Reset the connection — for RFC this closes the session.
+     * Provides interface compatibility with HTTP connections.
+     */
+    reset(): void;
+    /**
+     * Close the RFC connection and release the ABAP session.
+     */
+    close(): Promise<void>;
+    private static validateConfig;
+}
+//# sourceMappingURL=RfcAbapConnection.d.ts.map

package/dist/connection/RfcAbapConnection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RfcAbapConnection.d.ts","sourceRoot":"","sources":["../../src/connection/RfcAbapConnection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA0F1D;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IASpD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IATzB,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,WAAW,CAAyC;IAC5D,OAAO,CAAC,aAAa,CAAuB;gBAGzB,MAAM,EAAE,SAAS,EACjB,MAAM,GAAE,OAAO,GAAG,IAAW;IAa1C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA8BxB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAInC,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,IAAI;IAU9C,cAAc,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IA8L9B;;;OAGG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,OAAO,CAAC,MAAM,CAAC,cAAc;CAqB9B"}