@mcp-abap-adt/auth-broker 3.0.2 → 3.0.4

package/CHANGELOG.md

@@ -9,7 +9,31 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Thank you to all contributors! See [CONTRIBUTORS.md](CONTRIBUTORS.md) for the complete list.
 
-## [Unreleased]
+## [3.0.4] - 2026-09-28
+
+### Fixed
+
+- **`mcp-sso` did not start from an installed package.** It imports
+  `@mcp-abap-adt/logger`, which was only a dev dependency, so every command —
+  `--version` and `help` included — died with `Cannot find module
+  '@mcp-abap-adt/logger'`. It worked in this repository, where dev dependencies
+  are installed. `@mcp-abap-adt/logger` is now a runtime dependency. `mcp-auth`
+  was not affected. Found by installing the 3.0.3 tarball into an empty
+  directory and running each bin.
+
+### Tests
+
+- **`tests/sso-demo` moves to CAP 10**: `@sap/cds` `^10`, `@sap/cds-dk` `^10`,
+  `@cap-js/sqlite` `^3`. `npm audit` there goes from 12 findings (2 critical,
+  6 high) to 0: they sat in copies nested under `@sap/cds-dk` 9, which no
+  update inside 9.x could reach. `cds build --production` builds the service as
+  before. The demo is not part of the published package.
+
+## [3.0.3] - 2026-09-27
+
+### Added
+
+- **`help` and `version` as commands** for `mcp-auth` and `mcp-sso`: `help` / `--help` / `-h` and `version` / `--version` / `-v` — the same set in every CLI of the family, each answering before anything starts or connects. Both answered "Unknown command".
 
 ## [3.0.2] - 2026-09-27
 

package/dist/bin/mcp-auth.js

@@ -131,8 +131,8 @@ function showHelp() {
     console.log('  --assertion <base64>       A SAMLResponse obtained elsewhere');
     console.log('  --assertion-flow <flow>    browser|manual|assertion');
     console.log('');
-    console.log('  --version, -v          Show version number');
-    console.log('  --help, -h             Show this help message');
+    console.log('  version, --version, -v Show version number');
+    console.log('  help, --help, -h       Show this help message');
     console.log('');
     console.log('Examples:');
     console.log('  # Auth code (default flow via service key)');
@@ -189,11 +189,16 @@ function showHelp() {
 }
 function parseArgs(args = process.argv.slice(2)) {
     // Handle --version and --help first
-    if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
+    if (args.length === 0 ||
+        args[0] === 'help' ||
+        args.includes('--help') ||
+        args.includes('-h')) {
         showHelp();
         process.exit(0);
     }
-    if (args.includes('--version') || args.includes('-v')) {
+    if (args[0] === 'version' ||
+        args.includes('--version') ||
+        args.includes('-v')) {
         console.log(getVersion());
         process.exit(0);
     }
@@ -401,6 +406,16 @@ function workDir() {
 }
 async function main() {
     const rawArgs = process.argv.slice(2);
+    // `help` and `version` as commands, like every CLI in the family; they answer
+    // before any subcommand is dispatched.
+    if (rawArgs[0] === 'help') {
+        showHelp();
+        process.exit(0);
+    }
+    if (rawArgs[0] === 'version') {
+        console.log(getVersion());
+        process.exit(0);
+    }
     const subcommand = rawArgs[0];
     const hasSubcommand = subcommand && !subcommand.startsWith('-') && subcommand.length > 0;
     if (hasSubcommand) {

package/dist/bin/mcp-sso.js

@@ -165,8 +165,8 @@ function showHelp() {
     console.log('  also needs --idp-initiated or --authn-request-id; the browser and manual flows');
     console.log('  send their own request unless --idp-initiated is given.');
     console.log('');
-    console.log('  --version, -v              Show version number');
-    console.log('  --help, -h                 Show this help message');
+    console.log('  version, --version, -v     Show version number');
+    console.log('  help, --help, -h           Show this help message');
 }
 function parseScopes(value) {
     if (!value)
@@ -218,11 +218,16 @@ function createCliLogger(prefix = 'SSO') {
 }
 function parseArgs() {
     let args = process.argv.slice(2);
-    if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
+    if (args.length === 0 ||
+        args[0] === 'help' ||
+        args.includes('--help') ||
+        args.includes('-h')) {
         showHelp();
         process.exit(0);
     }
-    if (args.includes('--version') || args.includes('-v')) {
+    if (args[0] === 'version' ||
+        args.includes('--version') ||
+        args.includes('-v')) {
         console.log(getVersion());
         process.exit(0);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/auth-broker",
-  "version": "3.0.2",
+  "version": "3.0.4",
   "description": "Per-destination token broker for SAP BTP and ABAP: sessions and service keys from stores, tokens from an injected provider, results persisted - plus the mcp-auth and mcp-sso CLIs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -72,11 +72,11 @@
     "@mcp-abap-adt/interfaces-auth": "^2.1.0",
     "@mcp-abap-adt/interfaces-auth-sap": "^1.0.1",
     "@mcp-abap-adt/interfaces-utils": "^1.1.0",
+    "@mcp-abap-adt/logger": "^0.4.0",
     "axios": "^1.13.5"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.3.14",
-    "@mcp-abap-adt/logger": "^0.4.0",
     "@types/express": "^5.0.5",
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",