@mcp-abap-adt/connection 9.3.1 → 9.3.4

package/CHANGELOG.md

@@ -7,6 +7,58 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [9.3.4] - 2026-09-27
+
+### Changed
+
+- **Release the RFC context reset under an available package version.** npm
+  already contained version `9.3.3`, so this release carries the RFC stateless
+  context reset as `9.3.4`. With `sap-rfc-lite` 0.2.0, stateless calls reuse a
+  conversation and reset its server context after each call; older clients
+  continue to open a conversation per call. See the `9.3.3` entry below for
+  measured behavior and performance.
+
+## [9.3.3] - 2026-09-27
+
+### Changed
+
+- **Over RFC, stateless calls reuse a conversation and reset its server
+  context when supported.** `@mcp-abap-adt/sap-rfc-lite` 0.2.0 adds
+  `resetServerContext()` (`RfcResetServerContext`), so each call gets a clean
+  ABAP context without logging in again. Measured on E19, this took about
+  0.24 s per call, compared with 0.67 s when opening a conversation each time.
+  Concurrent calls use a separate conversation so they cannot run between a
+  previous call and its reset. If reset fails, that conversation is closed.
+  With `sap-rfc-lite` 0.1.x, calls continue to use a new conversation each.
+  Create, read after create, two lock/write/unlock rounds and delete passed on
+  one E19 connection.
+
+## [9.3.2] - 2026-09-27
+
+### Fixed
+
+- **Over RFC, a request that is not stateful runs on a conversation of its
+  own.** `RfcTransport` carried everything on one conversation, one ABAP
+  session, so whatever a program left in it stayed:
+  - after a package was created or written, every further write or delete of
+    it answered 400 PAK/058 "Package … is already locked" (`CL_PACKAGE`'s
+    instance buffer);
+  - a read straight after a create answered 400 SADT_RESOURCE/007.
+
+  Now the conversation `open()` makes carries the requests marked `stateful`
+  (the lock and its release), and every other request opens one of its own
+  and closes it when it answers. That is Eclipse ADT's split over JCo: one
+  stateful enqueue session, every other call in a session of its own.
+  Measured on E19, one connection: create, read, two lock/PUT/unlock rounds
+  and a delete all pass. The price is a logon per non-stateful call — about
+  0.5 s on E19, against about 0.1 s for the call itself.
+
+  Stateful is decided the same way on both wires (`isStatefulRequest`): the
+  connection's flag, or a session header the caller wrote itself. And a call
+  whose own conversation is still logging on when the wire is closed sends
+  nothing: it closes that conversation and refuses, rather than delivering a
+  `PUT` or `DELETE` on a wire already given back.
+
 ## [9.3.1] - 2026-09-27
 
 ### Fixed
@@ -1831,7 +1883,10 @@ const connection = createAbapConnection(config, logger);
 - JWT token refresh now properly handles connection errors (401/403 during initial connect)
 - Permission errors (403 with "ExceptionResourceNoAccess") no longer trigger JWT refresh loops
 - Proper separation: base class handles HTTP/session, concrete classes handle auth-specific errors
-[Unreleased]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.1...HEAD
+[Unreleased]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.4...HEAD
+[9.3.4]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.3...v9.3.4
+[9.3.3]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.2...v9.3.3
+[9.3.2]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.1...v9.3.2
 [9.3.1]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.3.0...v9.3.1
 [9.3.0]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.2.2...v9.3.0
 [9.2.2]: https://github.com/fr0ster/mcp-abap-connection/compare/v9.2.1...v9.2.2

package/README.md

@@ -292,6 +292,14 @@ where stateful HTTP sessions are not usable: an RFC conversation is one ABAP
 session for its whole lifetime, which is the way past `423 invalid lock handle`
 on BASIS < 7.50.
 
+Since 9.3.2, LOCK and UNLOCK in stateful mode share the persistent RFC
+conversation; stateless requests use a separate ABAP context. With
+`sap-rfc-lite` 0.2.0 or newer, that context is reset between calls on a kept
+conversation; older clients open one conversation per call. This prevents stale
+package state from causing PAK/058 on later writes or SADT_RESOURCE/007 on a
+read after create. Concurrent calls use a separate conversation. See
+[RFC conversation isolation](./docs/STATEFUL_SESSION_GUIDE.md#rfc-conversation-isolation-932-and-933).
+
 Needs the SAP NW RFC SDK on the machine and `npm install @mcp-abap-adt/sap-rfc-lite`.
 
 ```typescript

package/dist/connection/HttpTransport.d.ts

@@ -21,15 +21,7 @@
 import { type AgentOptions } from 'node:https';
 import type { ILogger } from '../logger.js';
 import type { IAdtEstablishContext, IAdtSessionContext, IAdtTransport, IAdtTransportRequest, IAdtTransportResponse } from './IAdtTransport.js';
-/**
- * Whether the request runs in the stateful session: marked so by the
- * connection, or — kept for callers that still write it themselves — carrying
- * the session header already.
- *
- * Exported for the wires that rewrite a request before sending it: the
- * verdict has to be taken on the request as the caller made it.
- */
-export declare function isStatefulRequest(request: IAdtTransportRequest): boolean;
+export { isStatefulRequest } from './statefulRequest.js';
 export declare class HttpTransport implements IAdtTransport {
     private readonly agentOptions;
     protected readonly logger: ILogger | null;

package/dist/connection/HttpTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HttpTransport.d.ts","sourceRoot":"","sources":["../../src/connection/HttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAwC5B;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAaxE;AASD,qBAAa,aAAc,YAAW,aAAa;IA6B/C,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IACzC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IApC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAU;IAE/B,OAAO,CAAC,QAAQ,CAA8B;IAE9C;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,KAAK,CAAuB;gBAGjB,YAAY,GAAE,MAAM,YAAyB,EAC3C,MAAM,GAAE,OAAO,GAAG,IAAW;IAChD;;;;;OAKG;IACc,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO;IAGtE;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAgC/C,0EAA0E;IAC1E,OAAO,IAAI,MAAM,GAAG,IAAI;IAIxB;;;;;;OAMG;IACH,kBAAkB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAQzC;;;;;OAKG;IACH,kBAAkB,IAAI,OAAO;IAI7B;;;;;;;OAOG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IASzC;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAIlD;;;;;;;OAOG;IACG,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmG7D,uEAAuE;IACvE,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAI1C,4EAA4E;IAC5E,aAAa,IAAI,IAAI;IASrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,KAAK;IA6Bb;;;;;OAKG;IACH,SAAS,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAItD,0EAA0E;IAC1E,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,MAAM;IAuBd;;;;;;OAMG;IACG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAEvD;;;;;;OAMG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAExD;;;;;OAKG;IACG,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIzE;;;;;;;;;;;;;OAaG;cACa,YAAY,CAC1B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAInB,QAAQ;CA4BvB"}
+{"version":3,"file":"HttpTransport.d.ts","sourceRoot":"","sources":["../../src/connection/HttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAuC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AASzD,qBAAa,aAAc,YAAW,aAAa;IA6B/C,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IACzC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IApC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAU;IAE/B,OAAO,CAAC,QAAQ,CAA8B;IAE9C;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,KAAK,CAAuB;gBAGjB,YAAY,GAAE,MAAM,YAAyB,EAC3C,MAAM,GAAE,OAAO,GAAG,IAAW;IAChD;;;;;OAKG;IACc,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO;IAGtE;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAgC/C,0EAA0E;IAC1E,OAAO,IAAI,MAAM,GAAG,IAAI;IAIxB;;;;;;OAMG;IACH,kBAAkB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAQzC;;;;;OAKG;IACH,kBAAkB,IAAI,OAAO;IAI7B;;;;;;;OAOG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IASzC;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAIlD;;;;;;;OAOG;IACG,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmG7D,uEAAuE;IACvE,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAI1C,4EAA4E;IAC5E,aAAa,IAAI,IAAI;IASrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,KAAK;IA6Bb;;;;;OAKG;IACH,SAAS,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAItD,0EAA0E;IAC1E,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,MAAM;IAuBd;;;;;;OAMG;IACG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAEvD;;;;;;OAMG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAExD;;;;;OAKG;IACG,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIzE;;;;;;;;;;;;;OAaG;cACa,YAAY,CAC1B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAInB,QAAQ;CA4BvB"}

package/dist/connection/HttpTransport.js

@@ -23,12 +23,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HttpTransport = void 0;
-exports.isStatefulRequest = isStatefulRequest;
+exports.HttpTransport = exports.isStatefulRequest = void 0;
 const node_https_1 = require("node:https");
 const axios_1 = __importDefault(require("axios"));
 const cookies_js_1 = require("../utils/cookies.js");
 const csrfConfig_js_1 = require("./csrfConfig.js");
+const statefulRequest_js_1 = require("./statefulRequest.js");
 /** The cookie that names a stateful ABAP context. */
 const CONTEXT_COOKIE = 'sap-contextid';
 /**
@@ -63,30 +63,9 @@ function withoutContextCookie(cookie) {
         .join('; ');
     return kept || undefined;
 }
-/** The header that asks SAP for the stateful session over HTTP. */
-const SESSION_TYPE_HEADER = 'x-sap-adt-sessiontype';
-/**
- * Whether the request runs in the stateful session: marked so by the
- * connection, or — kept for callers that still write it themselves — carrying
- * the session header already.
- *
- * Exported for the wires that rewrite a request before sending it: the
- * verdict has to be taken on the request as the caller made it.
- */
-function isStatefulRequest(request) {
-    if (request.stateful)
-        return true;
-    const headers = request.headers;
-    if (!headers)
-        return false;
-    for (const [name, value] of Object.entries(headers)) {
-        if (name.toLowerCase() === SESSION_TYPE_HEADER &&
-            String(value).toLowerCase() === 'stateful') {
-            return true;
-        }
-    }
-    return false;
-}
+// The one verdict every wire takes; re-exported for the wires built on this one.
+var statefulRequest_js_2 = require("./statefulRequest.js");
+Object.defineProperty(exports, "isStatefulRequest", { enumerable: true, get: function () { return statefulRequest_js_2.isStatefulRequest; } });
 /** A 404 there means the system has no such endpoint, not that it is unwell. */
 function absentEndpoint(error) {
     const status = error
@@ -368,7 +347,7 @@ class HttpTransport {
      */
     dress(request) {
         const headers = request.headers;
-        const stateful = isStatefulRequest(request);
+        const stateful = (0, statefulRequest_js_1.isStatefulRequest)(request);
         const dressed = {
             ...this.affinityHeaders(),
             ...this.sessionHeaders(),
@@ -404,7 +383,7 @@ class HttpTransport {
      * `LegacyOnPremHttpTransport`).
      */
     sessionTypeHeaders() {
-        return { [SESSION_TYPE_HEADER]: 'stateful' };
+        return { [statefulRequest_js_1.SESSION_TYPE_HEADER]: 'stateful' };
     }
     /** A path becomes an address; anything already absolute is left alone. */
     address(url) {

package/dist/connection/LegacyOnPremHttpTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LegacyOnPremHttpTransport.d.ts","sourceRoot":"","sources":["../../src/connection/LegacyOnPremHttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,qBAAa,yBAA0B,SAAQ,mBAAmB;IAChE,SAAkB,IAAI,wBAAwB;IAE9C,mFAAmF;cAChE,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAI/D;;;;;;;;;OASG;IACY,IAAI,CACjB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAUjC,OAAO,CAAC,kBAAkB;IAY1B;;;;;;;OAOG;IACM,kBAAkB,IAAI,OAAO;CAGvC"}
+{"version":3,"file":"LegacyOnPremHttpTransport.d.ts","sourceRoot":"","sources":["../../src/connection/LegacyOnPremHttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAK/D,qBAAa,yBAA0B,SAAQ,mBAAmB;IAChE,SAAkB,IAAI,wBAAwB;IAE9C,mFAAmF;cAChE,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAI/D;;;;;;;;;OASG;IACY,IAAI,CACjB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAUjC,OAAO,CAAC,kBAAkB;IAY1B;;;;;;;OAOG;IACM,kBAAkB,IAAI,OAAO;CAGvC"}

package/dist/connection/LegacyOnPremHttpTransport.js

@@ -15,8 +15,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LegacyOnPremHttpTransport = void 0;
-const HttpTransport_js_1 = require("./HttpTransport.js");
 const OnPremHttpTransport_js_1 = require("./OnPremHttpTransport.js");
+const statefulRequest_js_1 = require("./statefulRequest.js");
 const SESSION_TYPE_HEADER = 'x-sap-adt-sessiontype';
 class LegacyOnPremHttpTransport extends OnPremHttpTransport_js_1.OnPremHttpTransport {
     kind = 'onprem-http-legacy';
@@ -40,7 +40,7 @@ class LegacyOnPremHttpTransport extends OnPremHttpTransport_js_1.OnPremHttpTrans
         // cookie, only without the header this system is hurt by.
         return super.send({
             ...this.withoutSessionType(request),
-            stateful: (0, HttpTransport_js_1.isStatefulRequest)(request),
+            stateful: (0, statefulRequest_js_1.isStatefulRequest)(request),
         });
     }
     withoutSessionType(request) {

package/dist/connection/RfcTransport.d.ts

@@ -11,12 +11,32 @@
  * "invalid lock handle" on legacy systems (BASIS < 7.50) where stateful HTTP
  * sessions are not usable.
  *
+ * **Two conversations, the way Eclipse ADT holds them over JCo.** Its trace
+ * shows one long-lived stateful session (`JCoEnqueueSystemSession`) for `LOCK`
+ * and `UNLOCK`, and every other call — the `PUT` included — in a session of
+ * its own. Here:
+ *
+ * - the persistent conversation, opened by `open()` and kept while this wire
+ *   lives, carries the requests marked `stateful` — the lock and what must
+ *   share its session;
+ * - every other request opens a conversation of its own, and closes it when
+ *   it answers.
+ *
+ * One conversation for everything kept whatever an ABAP program left in the
+ * session. `CL_PACKAGE` buffers its instances for the life of the session and
+ * a save leaves them changeable, so after a create or a write every further
+ * write or delete of that package answered 400 PAK/058 "Package … is already
+ * locked"; a read straight after a create answered 400 SADT_RESOURCE/007.
+ * Measured on E19 (2026-09-27): LOCK and UNLOCK on one conversation, the PUT
+ * on another — two writes in a row fail on a shared second conversation and
+ * pass on a fresh one per call. The price is a logon per non-stateful call
+ * (~0.5 s on E19, against ~0.1 s for the call itself).
+ *
  * **What is NOT here.** Cookies, the CSRF token and the session lifecycle
  * belong to the connection above this seam and are already in
  * `request.headers` by the time `send()` is called. `x-sap-adt-sessiontype` is
- * not sent at all: `request.stateful` is HTTP's to express, and over RFC
- * Eclipse's JCo trace carries no session header — its stateful session is a
- * connection of its own, not a header on the request. A transport that
+ * not sent at all: over RFC `request.stateful` picks the conversation, and
+ * Eclipse's JCo trace carries no session header either. A transport that
  * also captured cookies would be doing that work twice, and the two copies
  * would disagree the first time one of them was cleared.
  */
@@ -28,6 +48,13 @@ export interface IRfcConversation {
     close(): Promise<void>;
     call(fm: string, params: Record<string, unknown>): Promise<Record<string, any>>;
     readonly alive: boolean;
+    /**
+     * Ends the ABAP session context and keeps the connection open
+     * (`RfcResetServerContext`, `@mcp-abap-adt/sap-rfc-lite` >= 0.2.0). Where it
+     * exists, one conversation serves the non-stateful calls, reset after each;
+     * where it does not, each such call opens a conversation of its own.
+     */
+    resetServerContext?(): Promise<void>;
 }
 /** What this wire does beyond carrying the request. */
 export interface IRfcTransportOptions {
@@ -56,6 +83,23 @@ export declare class RfcTransport implements IOnPremTransport {
     /** Which system this wire is for. Read by the compiler, never at runtime. */
     readonly system: "onprem";
     private conversation;
+    /**
+     * Bumped by every `close()`. A call that opened a conversation of its own
+     * compares it after the logon: the wire may have been closed while that
+     * logon was under way, and a write must not go out on a wire the caller has
+     * already given back.
+     */
+    private generation;
+    /**
+     * The conversation the non-stateful calls share when the client can reset
+     * it: opened on the first such call, reset after every call, closed with the
+     * wire. `null` until then, or after a reset failed.
+     */
+    private stateless;
+    /** Taken by the call on `stateless` until its reset is done. */
+    private statelessBusy;
+    /** `false` once a client showed it cannot reset; then every call opens its own. */
+    private canReset;
     /** Names the conversation, and so the ABAP session it carries. */
     private conversationId;
     /**
@@ -110,5 +154,31 @@ export declare class RfcTransport implements IOnPremTransport {
     /** Never throws, and a repeat call finds nothing owed. */
     close(): Promise<void>;
     send(request: IAdtTransportRequest): Promise<IAdtTransportResponse>;
+    /**
+     * A request that is not stateful, in a fresh ABAP session.
+     *
+     * Where the client can reset (`resetServerContext`), one kept conversation
+     * serves these calls and is reset after each: a fresh context without a new
+     * logon, ~0.1 s instead of ~0.5 s on E19. Where it cannot, or while that
+     * conversation is busy with another call, the call opens a conversation of
+     * its own and closes it when it answers.
+     *
+     * A call and its reset go together: a second call on the kept conversation
+     * before the first one's reset would run in the first one's context — a
+     * package the first one saved would refuse the second one's write (PAK/058).
+     * So a concurrent call takes a conversation of its own instead of waiting.
+     */
+    private carryOnItsOwn;
+    private carryOnKept;
+    /** A conversation opened for this one call, closed when it answers. */
+    private carryOnThrowaway;
+    /**
+     * A new conversation, logged on. The logon takes time (~0.5 s on E19); if the
+     * wire was closed meanwhile, the conversation is closed again and nothing is
+     * sent — not a PUT, not a DELETE — on a wire already given back.
+     */
+    private openOwn;
+    private closeQuietly;
+    private carry;
 }
 //# sourceMappingURL=RfcTransport.d.ts.map

package/dist/connection/RfcTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RfcTransport.d.ts","sourceRoot":"","sources":["../../src/connection/RfcTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EACV,oBAAoB,EAEpB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAgFD,uDAAuD;AACvD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,qBAAa,YAAa,YAAW,gBAAgB;IA+EjD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhF1B,QAAQ,CAAC,IAAI,SAAS;IAEtB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAG,QAAQ,CAAU;IAEpC,OAAO,CAAC,YAAY,CAAiC;IACrD,kEAAkE;IAClE,OAAO,CAAC,cAAc,CAAM;IAE5B;;;;;;OAMG;IACH,MAAM,IAAI,IAAI;IAEd,2CAA2C;IAC3C,OAAO,IAAI,IAAI;IAIf;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAE9D,+BAA+B;IAC/B,SAAS,IAAI,IAAI;IAIjB;;;OAGG;IACH,cAAc,IAAI,IAAI;IAEtB;;;OAGG;IACH,6EAA6E;IAC7E,kBAAkB,IAAI,OAAO;IAI7B,kBAAkB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAQzC,2EAA2E;IAC3E,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAIzC;;;;OAIG;IACH,aAAa,IAAI,IAAI;IAErB;;;;;OAKG;gBAEgB,OAAO,EAAE,MAAM,gBAAgB,EAC/B,MAAM,GAAE,OAAO,GAAG,IAAW,EAC7B,OAAO,GAAE,oBAAyB;IAGrD,oDAAoD;IACpD,OAAO,CAAC,OAAO;IAcT,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB3B,0DAA0D;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAatB,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAkK1E"}
+{"version":3,"file":"RfcTransport.d.ts","sourceRoot":"","sources":["../../src/connection/RfcTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EACV,oBAAoB,EAEpB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAG5B,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAgFD,uDAAuD;AACvD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,qBAAa,YAAa,YAAW,gBAAgB;IAiGjD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlG1B,QAAQ,CAAC,IAAI,SAAS;IAEtB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAG,QAAQ,CAAU;IAEpC,OAAO,CAAC,YAAY,CAAiC;IACrD;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAAiC;IAClD,gEAAgE;IAChE,OAAO,CAAC,aAAa,CAAS;IAC9B,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAsB;IACtC,kEAAkE;IAClE,OAAO,CAAC,cAAc,CAAM;IAE5B;;;;;;OAMG;IACH,MAAM,IAAI,IAAI;IAEd,2CAA2C;IAC3C,OAAO,IAAI,IAAI;IAIf;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAE9D,+BAA+B;IAC/B,SAAS,IAAI,IAAI;IAIjB;;;OAGG;IACH,cAAc,IAAI,IAAI;IAEtB;;;OAGG;IACH,6EAA6E;IAC7E,kBAAkB,IAAI,OAAO;IAI7B,kBAAkB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAQzC,2EAA2E;IAC3E,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAIzC;;;;OAIG;IACH,aAAa,IAAI,IAAI;IAErB;;;;;OAKG;gBAEgB,OAAO,EAAE,MAAM,gBAAgB,EAC/B,MAAM,GAAE,OAAO,GAAG,IAAW,EAC7B,OAAO,GAAE,oBAAyB;IAGrD,oDAAoD;IACpD,OAAO,CAAC,OAAO;IAcT,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB3B,0DAA0D;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBtB,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAezE;;;;;;;;;;;;;OAaG;YACW,aAAa;YAUb,WAAW;IAqDzB,uEAAuE;YACzD,gBAAgB;IAa9B;;;;OAIG;YACW,OAAO;YAgBP,YAAY;YAQZ,KAAK;CAyKpB"}

package/dist/connection/RfcTransport.js

@@ -12,18 +12,39 @@
  * "invalid lock handle" on legacy systems (BASIS < 7.50) where stateful HTTP
  * sessions are not usable.
  *
+ * **Two conversations, the way Eclipse ADT holds them over JCo.** Its trace
+ * shows one long-lived stateful session (`JCoEnqueueSystemSession`) for `LOCK`
+ * and `UNLOCK`, and every other call — the `PUT` included — in a session of
+ * its own. Here:
+ *
+ * - the persistent conversation, opened by `open()` and kept while this wire
+ *   lives, carries the requests marked `stateful` — the lock and what must
+ *   share its session;
+ * - every other request opens a conversation of its own, and closes it when
+ *   it answers.
+ *
+ * One conversation for everything kept whatever an ABAP program left in the
+ * session. `CL_PACKAGE` buffers its instances for the life of the session and
+ * a save leaves them changeable, so after a create or a write every further
+ * write or delete of that package answered 400 PAK/058 "Package … is already
+ * locked"; a read straight after a create answered 400 SADT_RESOURCE/007.
+ * Measured on E19 (2026-09-27): LOCK and UNLOCK on one conversation, the PUT
+ * on another — two writes in a row fail on a shared second conversation and
+ * pass on a fresh one per call. The price is a logon per non-stateful call
+ * (~0.5 s on E19, against ~0.1 s for the call itself).
+ *
  * **What is NOT here.** Cookies, the CSRF token and the session lifecycle
  * belong to the connection above this seam and are already in
  * `request.headers` by the time `send()` is called. `x-sap-adt-sessiontype` is
- * not sent at all: `request.stateful` is HTTP's to express, and over RFC
- * Eclipse's JCo trace carries no session header — its stateful session is a
- * connection of its own, not a header on the request. A transport that
+ * not sent at all: over RFC `request.stateful` picks the conversation, and
+ * Eclipse's JCo trace carries no session header either. A transport that
  * also captured cookies would be doing that work twice, and the two copies
  * would disagree the first time one of them was cleared.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RfcTransport = void 0;
 const node_crypto_1 = require("node:crypto");
+const statefulRequest_js_1 = require("./statefulRequest.js");
 /**
  * ADT exception types, mapped to what they would have been over HTTP. Standard
  * types, returned in `<exc:exception>` XML.
@@ -101,6 +122,23 @@ class RfcTransport {
     /** Which system this wire is for. Read by the compiler, never at runtime. */
     system = 'onprem';
     conversation = null;
+    /**
+     * Bumped by every `close()`. A call that opened a conversation of its own
+     * compares it after the logon: the wire may have been closed while that
+     * logon was under way, and a write must not go out on a wire the caller has
+     * already given back.
+     */
+    generation = 0;
+    /**
+     * The conversation the non-stateful calls share when the client can reset
+     * it: opened on the first such call, reset after every call, closed with the
+     * wire. `null` until then, or after a reset failed.
+     */
+    stateless = null;
+    /** Taken by the call on `stateless` until its reset is done. */
+    statelessBusy = false;
+    /** `false` once a client showed it cannot reset; then every call opens its own. */
+    canReset;
     /** Names the conversation, and so the ABAP session it carries. */
     conversationId = '';
     /**
@@ -182,6 +220,7 @@ class RfcTransport {
     async open() {
         if (this.conversation?.alive)
             return;
+        const generation = this.generation;
         const conversation = this.connect();
         try {
             await conversation.open();
@@ -189,21 +228,39 @@ class RfcTransport {
         catch (e) {
             throw new Error(`Failed to open RFC connection: ${message(e)}`);
         }
+        // close() ran while this logged on: the session it would have handed out
+        // belongs to a wire already given back, so it is closed, not kept.
+        if (generation !== this.generation) {
+            await this.closeQuietly(conversation);
+            throw new Error('RFC transport was closed while it was being opened.');
+        }
         this.conversation = conversation;
         // Minted here, where the session begins. A conversation opened after an
         // earlier one closed is a DIFFERENT ABAP session, and the fingerprint has
         // to say so — a constant would report `unchanged` across a reconnect and
         // hide exactly the replacement the identity policy exists to catch.
         this.conversationId = (0, node_crypto_1.randomUUID)();
-        this.logger?.debug('RFC conversation opened (stateful by nature)');
+        this.logger?.debug('RFC conversation opened (the stateful one)');
     }
     /** Never throws, and a repeat call finds nothing owed. */
     async close() {
+        // Everything the wire holds is given up BEFORE the first await. Closing
+        // takes time, and a send() that ran meanwhile would otherwise find the
+        // old stateful conversation still `alive` — a lock request carried on a
+        // session already being given back — or open a stateless one of its own
+        // and send a write after close(). With both references gone and the
+        // generation moved on, such a send() is refused as "not open", and a
+        // logon still under way sees the change and sends nothing.
+        this.generation += 1;
+        const stateless = this.stateless;
         const conversation = this.conversation;
-        if (!conversation)
-            return;
+        this.stateless = null;
         this.conversation = null;
         this.conversationId = '';
+        if (stateless)
+            await this.closeQuietly(stateless);
+        if (!conversation)
+            return;
         try {
             await conversation.close();
             this.logger?.debug('RFC conversation closed');
@@ -216,6 +273,123 @@ class RfcTransport {
         if (!this.conversation?.alive) {
             throw new Error('RFC transport is not open. Call connect() first.');
         }
+        // The same verdict HTTP takes: the flag the connection sets, or a session
+        // header the caller wrote itself. A caller that asks for the lock's
+        // session either way has to land on the conversation that holds it.
+        // Taken once, here: every await below compares against it, and a call
+        // that finds the wire closed since it began sends nothing.
+        const generation = this.generation;
+        return (0, statefulRequest_js_1.isStatefulRequest)(request)
+            ? this.carry(request, this.conversation, generation)
+            : this.carryOnItsOwn(request, generation);
+    }
+    /**
+     * A request that is not stateful, in a fresh ABAP session.
+     *
+     * Where the client can reset (`resetServerContext`), one kept conversation
+     * serves these calls and is reset after each: a fresh context without a new
+     * logon, ~0.1 s instead of ~0.5 s on E19. Where it cannot, or while that
+     * conversation is busy with another call, the call opens a conversation of
+     * its own and closes it when it answers.
+     *
+     * A call and its reset go together: a second call on the kept conversation
+     * before the first one's reset would run in the first one's context — a
+     * package the first one saved would refuse the second one's write (PAK/058).
+     * So a concurrent call takes a conversation of its own instead of waiting.
+     */
+    async carryOnItsOwn(request, generation) {
+        if (this.canReset !== false && !this.statelessBusy) {
+            return this.carryOnKept(request, generation);
+        }
+        return this.carryOnThrowaway(request, generation);
+    }
+    async carryOnKept(request, generation) {
+        this.statelessBusy = true;
+        try {
+            if (!this.stateless?.alive) {
+                const opened = await this.openOwn(generation);
+                // Checked again after the await: close() may have run since openOwn()
+                // checked, and a conversation of a closed wire must not become the
+                // kept one of the next.
+                if (generation !== this.generation) {
+                    await this.closeQuietly(opened);
+                    throw new Error('RFC transport was closed while the call was being opened; nothing was sent.');
+                }
+                if (typeof opened.resetServerContext !== 'function') {
+                    // An older client: it cannot be reset, so it is used once and closed,
+                    // and every later call opens its own.
+                    this.canReset = false;
+                    try {
+                        return await this.carry(request, opened, generation);
+                    }
+                    finally {
+                        await this.closeQuietly(opened);
+                    }
+                }
+                this.canReset = true;
+                this.stateless = opened;
+                this.logger?.debug('RFC stateless conversation opened (reset per call)');
+            }
+            const kept = this.stateless;
+            try {
+                return await this.carry(request, kept, generation);
+            }
+            finally {
+                try {
+                    await kept.resetServerContext?.();
+                }
+                catch (e) {
+                    // A context that could not be reset must not serve the next call.
+                    this.logger?.debug(`RFC reset failed, dropping the conversation: ${message(e)}`);
+                    if (this.stateless === kept)
+                        this.stateless = null;
+                    await this.closeQuietly(kept);
+                }
+            }
+        }
+        finally {
+            this.statelessBusy = false;
+        }
+    }
+    /** A conversation opened for this one call, closed when it answers. */
+    async carryOnThrowaway(request, generation) {
+        const own = await this.openOwn(generation);
+        this.logger?.debug('RFC conversation opened for one stateless call');
+        try {
+            return await this.carry(request, own, generation);
+        }
+        finally {
+            await this.closeQuietly(own);
+        }
+    }
+    /**
+     * A new conversation, logged on. The logon takes time (~0.5 s on E19); if the
+     * wire was closed meanwhile, the conversation is closed again and nothing is
+     * sent — not a PUT, not a DELETE — on a wire already given back.
+     */
+    async openOwn(generation) {
+        const own = this.connect();
+        try {
+            await own.open();
+        }
+        catch (e) {
+            throw new Error(`Failed to open RFC connection: ${message(e)}`);
+        }
+        if (generation !== this.generation || !this.conversation?.alive) {
+            await this.closeQuietly(own);
+            throw new Error('RFC transport was closed while the call was being opened; nothing was sent.');
+        }
+        return own;
+    }
+    async closeQuietly(conversation) {
+        try {
+            await conversation.close();
+        }
+        catch (e) {
+            this.logger?.debug(`RFC close error: ${message(e)}`);
+        }
+    }
+    async carry(request, conversation, generation) {
         const method = request.method.toUpperCase();
         // HTTP clients serialise `params`; RFC has no such step, so they go into
         // the URI here or they do not travel at all.
@@ -271,9 +445,14 @@ class RfcTransport {
         // mid-flight is precisely what the connection emulates over HTTP, where
         // a critical section raises the caller's timeout to a ten-minute ceiling so
         // an abort cannot orphan a lock handle. Here that comes free.
+        // The last point before anything leaves: nothing awaits between this
+        // check and the call, so a close() that ran at any await above stops it.
+        if (generation !== this.generation) {
+            throw new Error('RFC transport was closed before the call was sent; nothing was sent.');
+        }
         let raw;
         try {
-            raw = await this.conversation.call('SADT_REST_RFC_ENDPOINT', {
+            raw = await conversation.call('SADT_REST_RFC_ENDPOINT', {
                 REQUEST: {
                     REQUEST_LINE: {
                         METHOD: method,

package/dist/connection/statefulRequest.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Whether a request runs in the stateful session — the one a lock is taken and
+ * released in.
+ *
+ * One verdict for every wire. HTTP expresses it as a header and the context
+ * cookie, RFC as the conversation it picks; if the two wires decided it
+ * differently, a caller that asked for the session one way would keep its lock
+ * on one wire and lose it on the other.
+ */
+import type { IAdtTransportRequest } from './IAdtTransport.js';
+/** The header that asks SAP for the stateful session over HTTP. */
+export declare const SESSION_TYPE_HEADER = "x-sap-adt-sessiontype";
+/**
+ * Marked so by the connection, or — kept for callers that still write it
+ * themselves — carrying the session header already. Taken on the request as
+ * the caller made it, before a wire rewrites it.
+ */
+export declare function isStatefulRequest(request: IAdtTransportRequest): boolean;
+//# sourceMappingURL=statefulRequest.d.ts.map

package/dist/connection/statefulRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statefulRequest.d.ts","sourceRoot":"","sources":["../../src/connection/statefulRequest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAaxE"}

package/dist/connection/statefulRequest.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_TYPE_HEADER = void 0;
+exports.isStatefulRequest = isStatefulRequest;
+/** The header that asks SAP for the stateful session over HTTP. */
+exports.SESSION_TYPE_HEADER = 'x-sap-adt-sessiontype';
+/**
+ * Marked so by the connection, or — kept for callers that still write it
+ * themselves — carrying the session header already. Taken on the request as
+ * the caller made it, before a wire rewrites it.
+ */
+function isStatefulRequest(request) {
+    if (request.stateful)
+        return true;
+    const headers = request.headers;
+    if (!headers)
+        return false;
+    for (const [name, value] of Object.entries(headers)) {
+        if (name.toLowerCase() === exports.SESSION_TYPE_HEADER &&
+            String(value).toLowerCase() === 'stateful') {
+            return true;
+        }
+    }
+    return false;
+}

package/docs/STATEFUL_SESSION_GUIDE.md

@@ -49,7 +49,7 @@ The filter also applies to cookies supplied in request headers and retries.
 | --- | --- |
 | HTTP (on-prem / cloud) | Sends `x-sap-adt-sessiontype: stateful` and the context cookie, when held |
 | Legacy on-prem HTTP | Keeps the context cookie but omits the session-type header |
-| RFC | Uses its RFC conversation; `setSessionType()` adds no HTTP session-type header |
+| RFC | Uses the persistent conversation for stateful requests; since 9.3.4 resets a kept stateless conversation between calls when supported |
 
 A caller-supplied stateful header is also recognized, including by the legacy
 HTTP transport before it removes that header. Custom `IAdtTransport`
@@ -57,6 +57,29 @@ implementations must read `request.stateful`; the connection no longer adds
 `x-sap-adt-sessiontype` itself. The cookie fix was verified on E19 and E98;
 BASIS 7.40 and ABAP Cloud were not integration-tested for this change.
 
+## RFC conversation isolation (9.3.2–9.3.4)
+
+Stateful requests, including LOCK and UNLOCK, share the conversation opened
+by `connect()`. Since 9.3.4, `sap-rfc-lite` 0.2.0 and newer let stateless calls
+reuse a second conversation: the transport resets its ABAP server context after
+each call, keeping the RFC logon open. With older clients (0.1.x), or when a
+resettable conversation is busy, each stateless call gets a separate temporary
+conversation. Both `setSessionType('stateful')` and a caller-supplied stateful
+session header select the persistent conversation.
+
+Previously all RFC requests shared one ABAP session. On E19, saving a package
+left state in `CL_PACKAGE`'s instance buffer: later writes or deletes failed
+with **400 PAK/058, “Package … is already locked”**. Reading immediately after
+creation could fail with **400 SADT_RESOURCE/007**. With separate conversations,
+create, read, two lock/PUT/unlock rounds and delete passed on one connection.
+
+When using `sap-rfc-lite` 0.1.x, each stateless call pays for an RFC logon:
+about 0.5 s on E19, in addition to about 0.1 s for the call. With 0.2.0+, a
+resettable call took about 0.24 s total on E19. Direct connector users must mark
+LOCK and UNLOCK stateful to retain their conversation. If disconnect occurs
+while a temporary conversation is logging on, it is closed without sending
+the request; reconnect does not revive that pending request.
+
 ## Enabling Stateful Sessions
 
 Every example below builds on this much, so it is stated once:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/connection",
-  "version": "9.3.1",
+  "version": "9.3.4",
   "description": "ABAP connection layer for MCP ABAP ADT server",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -63,7 +63,7 @@
     "open": "^11.0.0"
   },
   "optionalDependencies": {
-    "@mcp-abap-adt/sap-rfc-lite": "^0.1.0"
+    "@mcp-abap-adt/sap-rfc-lite": "^0.1.0 || ^0.2.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.3.14",