@mcp-abap-adt/header-validator 0.1.3 → 0.1.6

package/CHANGELOG.md

@@ -5,6 +5,34 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.1.6] - 2025-12-05
+
+### Changed
+- **Version Alignment**: Updated `@mcp-abap-adt/interfaces` dependency from `^0.1.0` to `^0.1.1`
+
+## [0.1.5] - 2025-12-05
+
+### Changed
+- **Dependencies Update**: Updated dependencies and added `.npmrc` configuration
+  - Added `.npmrc` with `prefer-online=true` to ensure packages are fetched from npm registry
+
+## [0.1.4] - 2025-12-04
+
+### Added
+- **Interfaces Package Integration**: Migrated to use `@mcp-abap-adt/interfaces` package for all interface definitions
+  - All interfaces now imported from shared package
+  - Backward compatibility maintained with type aliases
+  - Dependency on `@mcp-abap-adt/interfaces@^0.1.0` added
+
+### Changed
+- **Interface Renaming**: Interfaces renamed to follow `I` prefix convention:
+  - `ValidatedAuthConfig` → `IValidatedAuthConfig` (type alias for backward compatibility)
+  - `HeaderValidationResult` → `IHeaderValidationResult` (type alias for backward compatibility)
+  - `AuthType` and `AuthMethodPriority` now imported from interfaces package
+  - Old names still work via type aliases for backward compatibility
+
 ## [0.1.3] - 2025-12-01
 
 ### Fixed

package/README.md

@@ -9,6 +9,56 @@ Header validator for MCP ABAP ADT - validates and prioritizes authentication hea
 - ✅ **Error Reporting**: Detailed error messages and warnings
 - ✅ **Type Safety**: Full TypeScript support with type definitions
 
+## Responsibilities and Design Principles
+
+### Core Development Principle
+
+**Interface-Only Communication**: This package follows a fundamental development principle: **all interactions with external dependencies happen ONLY through interfaces**. The code knows **NOTHING beyond what is defined in the interfaces**.
+
+This means:
+- Does not know about concrete implementation classes from other packages
+- Does not know about internal data structures or methods not defined in interfaces
+- Does not make assumptions about implementation behavior beyond interface contracts
+- Does not access properties or methods not explicitly defined in interfaces
+
+This principle ensures:
+- **Loose coupling**: Validator is decoupled from concrete implementations in other packages
+- **Flexibility**: New implementations can be added without modifying validator
+- **Testability**: Easy to mock dependencies for testing
+- **Maintainability**: Changes to implementations don't affect validator
+
+### Package Responsibilities
+
+This package is responsible for:
+
+1. **Header validation**: Validates authentication headers from HTTP requests
+2. **Priority resolution**: Determines which authentication method to use based on header presence and priority rules
+3. **Configuration extraction**: Extracts authentication configuration from headers
+4. **Error reporting**: Provides detailed validation errors and warnings
+
+#### What This Package Does
+
+- **Validates headers**: Checks authentication headers for validity and completeness
+- **Prioritizes methods**: Determines authentication method priority (SAP destination > MCP destination > JWT token > Basic auth)
+- **Extracts config**: Extracts `SapConfig` from validated headers
+- **Reports errors**: Provides detailed error messages and warnings for invalid configurations
+- **Type safety**: Returns typed validation results with configuration objects
+
+#### What This Package Does NOT Do
+
+- **Does NOT handle authentication**: Authentication is handled by `@mcp-abap-adt/connection` and `@mcp-abap-adt/auth-broker`
+- **Does NOT manage tokens**: Token management is handled by `@mcp-abap-adt/auth-broker`
+- **Does NOT make HTTP requests**: HTTP requests are handled by `@mcp-abap-adt/connection`
+- **Does NOT store configuration**: Configuration storage is handled by consumers
+- **Does NOT know about destinations**: Destination resolution is handled by `@mcp-abap-adt/auth-broker`
+
+### External Dependencies
+
+This package interacts with external packages **ONLY through interfaces**:
+
+- **`@mcp-abap-adt/connection`**: Uses `SapConfig` type for configuration - does not know about concrete connection implementation
+- **No direct dependencies on other packages**: All interactions happen through well-defined types and interfaces
+
 ## Installation
 
 ```bash

package/dist/headerValidator.d.ts

@@ -7,7 +7,7 @@
  * 3. Basic auth (x-sap-login + x-sap-password) - lowest priority
  */
 import { IncomingHttpHeaders } from 'http';
-import { HeaderValidationResult } from './types';
+import type { HeaderValidationResult } from './types';
 /**
  * Validate and prioritize authentication headers
  *

package/dist/headerValidator.js

@@ -9,7 +9,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateAuthHeaders = validateAuthHeaders;
-const types_1 = require("./types");
+const interfaces_1 = require("@mcp-abap-adt/interfaces");
 /**
  * Extract header value (handles array values)
  * Node.js normalizes headers to lowercase, but check both cases for safety
@@ -59,7 +59,7 @@ function validateSapDestinationAuth(headers) {
     if (!destination || destination.length === 0) {
         errors.push('x-sap-destination header is empty');
         return {
-            priority: types_1.AuthMethodPriority.NONE,
+            priority: interfaces_1.AuthMethodPriority.NONE,
             authType: 'jwt', // SAP destination always uses JWT
             sapUrl: '', // URL will be loaded from destination
             errors,
@@ -87,7 +87,7 @@ function validateSapDestinationAuth(headers) {
         warnings.push('x-sap-auth-type is ignored when x-sap-destination is present (always uses JWT)');
     }
     return {
-        priority: types_1.AuthMethodPriority.SAP_DESTINATION,
+        priority: interfaces_1.AuthMethodPriority.SAP_DESTINATION,
         authType: 'jwt', // Always JWT for x-sap-destination
         sapUrl: '', // URL will be loaded from destination (service key or .env)
         sapClient,
@@ -117,7 +117,7 @@ function validateMcpDestinationAuth(headers, sapUrl) {
     if (!destination || destination.length === 0) {
         errors.push('x-mcp-destination header is empty');
         return {
-            priority: types_1.AuthMethodPriority.NONE,
+            priority: interfaces_1.AuthMethodPriority.NONE,
             authType: 'jwt', // MCP destination always uses JWT
             sapUrl: '', // URL will be loaded from destination
             errors,
@@ -141,7 +141,7 @@ function validateMcpDestinationAuth(headers, sapUrl) {
         warnings.push('x-sap-jwt-token is ignored when x-mcp-destination is present (destination-based auth takes priority)');
     }
     return {
-        priority: types_1.AuthMethodPriority.MCP_DESTINATION,
+        priority: interfaces_1.AuthMethodPriority.MCP_DESTINATION,
         authType: 'jwt', // Always JWT for x-mcp-destination
         sapUrl: '', // URL will be loaded from destination (service key or .env)
         sapClient,
@@ -175,7 +175,7 @@ function validateDirectJwtAuth(headers, sapUrl, authType) {
     // Extract optional SAP client
     const sapClient = getHeaderValue(headers, 'x-sap-client');
     return {
-        priority: types_1.AuthMethodPriority.DIRECT_JWT,
+        priority: interfaces_1.AuthMethodPriority.DIRECT_JWT,
         authType,
         sapUrl,
         sapClient,
@@ -214,7 +214,7 @@ function validateBasicAuth(headers, sapUrl, authType) {
     // Return config with errors if validation failed
     if (errors.length > 0) {
         return {
-            priority: types_1.AuthMethodPriority.NONE,
+            priority: interfaces_1.AuthMethodPriority.NONE,
             authType,
             sapUrl,
             errors,
@@ -222,7 +222,7 @@ function validateBasicAuth(headers, sapUrl, authType) {
         };
     }
     return {
-        priority: types_1.AuthMethodPriority.BASIC,
+        priority: interfaces_1.AuthMethodPriority.BASIC,
         authType,
         sapUrl,
         username,
@@ -372,7 +372,7 @@ function validateAuthHeaders(headers) {
     // Check for conflicts (multiple auth methods with same priority shouldn't happen, but check anyway)
     const samePriorityConfigs = configs.filter(c => c.priority === selectedConfig.priority);
     if (samePriorityConfigs.length > 1) {
-        warnings.push(`Multiple authentication methods with same priority detected, using: ${types_1.AuthMethodPriority[selectedConfig.priority]}`);
+        warnings.push(`Multiple authentication methods with same priority detected, using: ${interfaces_1.AuthMethodPriority[selectedConfig.priority]}`);
     }
     // Merge errors and warnings
     const allErrors = [...errors, ...selectedConfig.errors];

package/dist/types.d.ts

@@ -1,64 +1,9 @@
 /**
  * Types for header validator
  */
-/**
- * Authentication type
- */
-export type AuthType = 'jwt' | 'xsuaa' | 'basic';
-/**
- * Authentication method priority
- * Higher number = higher priority
- */
-export declare enum AuthMethodPriority {
-    SAP_DESTINATION = 4,// x-sap-destination (uses AuthBroker, JWT only)
-    MCP_DESTINATION = 3,// x-mcp-destination + x-sap-auth-type=jwt (uses AuthBroker)
-    DIRECT_JWT = 2,// x-sap-jwt-token + x-sap-auth-type=jwt
-    BASIC = 1,// x-sap-login + x-sap-password + x-sap-auth-type=basic
-    NONE = 0
-}
-/**
- * Validated authentication configuration
- */
-export interface ValidatedAuthConfig {
-    /** Authentication method priority */
-    priority: AuthMethodPriority;
-    /** Authentication type */
-    authType: AuthType;
-    /** SAP URL */
-    sapUrl: string;
-    /** SAP Client (optional) */
-    sapClient?: string;
-    /** Destination name (for destination-based auth: x-sap-destination or x-mcp-destination) */
-    destination?: string;
-    /** JWT token (for direct JWT auth) */
-    jwtToken?: string;
-    /** Refresh token (optional, for JWT auth) */
-    refreshToken?: string;
-    /** UAA URL (optional, for JWT auth) */
-    uaaUrl?: string;
-    /** UAA Client ID (optional, for JWT auth) */
-    uaaClientId?: string;
-    /** UAA Client Secret (optional, for JWT auth) */
-    uaaClientSecret?: string;
-    /** Username (for basic auth) */
-    username?: string;
-    /** Password (for basic auth) */
-    password?: string;
-    /** Validation errors (if any) */
-    errors: string[];
-    /** Warnings (if any) */
-    warnings: string[];
-}
-/**
- * Header validation result
- */
-export interface HeaderValidationResult {
-    /** Is configuration valid? */
-    isValid: boolean;
-    /** Validated authentication configuration */
-    config?: ValidatedAuthConfig;
-    /** Validation errors */
-    errors: string[];
-    /** Warnings */
-    warnings: string[];
-}
+import type { AuthType } from '@mcp-abap-adt/interfaces';
+import { AuthMethodPriority, type IValidatedAuthConfig, type IHeaderValidationResult } from '@mcp-abap-adt/interfaces';
+export type { AuthType };
+export { AuthMethodPriority };
+export type ValidatedAuthConfig = IValidatedAuthConfig;
+export type HeaderValidationResult = IHeaderValidationResult;

package/dist/types.js

@@ -4,15 +4,5 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthMethodPriority = void 0;
-/**
- * Authentication method priority
- * Higher number = higher priority
- */
-var AuthMethodPriority;
-(function (AuthMethodPriority) {
-    AuthMethodPriority[AuthMethodPriority["SAP_DESTINATION"] = 4] = "SAP_DESTINATION";
-    AuthMethodPriority[AuthMethodPriority["MCP_DESTINATION"] = 3] = "MCP_DESTINATION";
-    AuthMethodPriority[AuthMethodPriority["DIRECT_JWT"] = 2] = "DIRECT_JWT";
-    AuthMethodPriority[AuthMethodPriority["BASIC"] = 1] = "BASIC";
-    AuthMethodPriority[AuthMethodPriority["NONE"] = 0] = "NONE"; // No valid authentication
-})(AuthMethodPriority || (exports.AuthMethodPriority = AuthMethodPriority = {}));
+const interfaces_1 = require("@mcp-abap-adt/interfaces");
+Object.defineProperty(exports, "AuthMethodPriority", { enumerable: true, get: function () { return interfaces_1.AuthMethodPriority; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/header-validator",
-  "version": "0.1.3",
+  "version": "0.1.6",
   "description": "Header validator for MCP ABAP ADT - validates and prioritizes authentication headers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -44,6 +44,9 @@
   "engines": {
     "node": ">=18.0.0"
   },
+  "dependencies": {
+    "@mcp-abap-adt/interfaces": "^0.1.1"
+  },
   "devDependencies": {
     "@types/jest": "^30.0.0",
     "@types/node": "^24.2.1",