@mcp-abap-adt/header-validator 0.1.7 → 0.3.0

package/dist/headerValidator.js

@@ -16,7 +16,9 @@ exports.validateAuthHeaders = validateAuthHeaders;
 exports.validateProxyHeaders = validateProxyHeaders;
 exports.isProxyRequest = isProxyRequest;
 exports.isMcpServerRequest = isMcpServerRequest;
-const interfaces_1 = require("@mcp-abap-adt/interfaces");
+const interfaces_auth_1 = require("@mcp-abap-adt/interfaces-auth");
+const interfaces_auth_sap_1 = require("@mcp-abap-adt/interfaces-auth-sap");
+const interfaces_network_1 = require("@mcp-abap-adt/interfaces-network");
 /**
  * Extract header value (handles array values)
  * Node.js normalizes headers to lowercase, but check both cases for safety
@@ -55,47 +57,48 @@ function isValidUrl(url) {
  */
 function validateSapDestinationAuth(headers) {
     // Check both lowercase and original case (Node.js normalizes to lowercase, but check both for safety)
-    const destinationRaw = headers[interfaces_1.HEADER_SAP_DESTINATION_SERVICE.toLowerCase()] || headers[interfaces_1.HEADER_SAP_DESTINATION_SERVICE];
+    const destinationRaw = headers[interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE.toLowerCase()] ||
+        headers[interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE];
     if (!destinationRaw) {
         return null;
     }
-    const destination = getHeaderValue(headers, interfaces_1.HEADER_SAP_DESTINATION_SERVICE);
+    const destination = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE);
     const errors = [];
     const warnings = [];
     // Validate destination name (check if empty after trim)
     if (!destination || destination.length === 0) {
-        errors.push(`${interfaces_1.HEADER_SAP_DESTINATION_SERVICE} header is empty`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE} header is empty`);
         return {
-            priority: interfaces_1.AuthMethodPriority.NONE,
-            authType: interfaces_1.AUTH_TYPE_JWT, // SAP destination always uses JWT
+            priority: interfaces_auth_sap_1.AuthMethodPriority.NONE,
+            authType: interfaces_auth_1.AUTH_TYPE_JWT, // SAP destination always uses JWT
             sapUrl: '', // URL will be loaded from destination
             errors,
             warnings,
         };
     }
     // Extract optional SAP client
-    const sapClient = getHeaderValue(headers, interfaces_1.HEADER_SAP_CLIENT);
+    const sapClient = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_CLIENT);
     // Optional: x-sap-login and x-sap-password (for cloud systems)
-    const username = getHeaderValue(headers, interfaces_1.HEADER_SAP_LOGIN);
-    const password = getHeaderValue(headers, interfaces_1.HEADER_SAP_PASSWORD);
+    const username = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_LOGIN);
+    const password = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_PASSWORD);
     // Warning if x-sap-url is provided (URL comes from destination, not header)
-    const sapUrl = getHeaderValue(headers, interfaces_1.HEADER_SAP_URL);
+    const sapUrl = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_URL);
     if (sapUrl) {
-        warnings.push(`${interfaces_1.HEADER_SAP_URL} is ignored when ${interfaces_1.HEADER_SAP_DESTINATION_SERVICE} is present (URL is loaded from destination service key or .env file)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_URL} is ignored when ${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE} is present (URL is loaded from destination service key or .env file)`);
     }
     // Warning if direct JWT token is also provided (destination takes priority)
-    const jwtToken = getHeaderValue(headers, interfaces_1.HEADER_SAP_JWT_TOKEN);
+    const jwtToken = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_JWT_TOKEN);
     if (jwtToken) {
-        warnings.push(`${interfaces_1.HEADER_SAP_JWT_TOKEN} is ignored when ${interfaces_1.HEADER_SAP_DESTINATION_SERVICE} is present (destination-based auth takes priority)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_JWT_TOKEN} is ignored when ${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE} is present (destination-based auth takes priority)`);
     }
     // Warning if auth-type is provided (not needed for x-sap-destination)
-    const authType = getHeaderValue(headers, interfaces_1.HEADER_SAP_AUTH_TYPE);
+    const authType = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_AUTH_TYPE);
     if (authType) {
-        warnings.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} is ignored when ${interfaces_1.HEADER_SAP_DESTINATION_SERVICE} is present (always uses JWT)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} is ignored when ${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE} is present (always uses JWT)`);
     }
     return {
-        priority: interfaces_1.AuthMethodPriority.SAP_DESTINATION,
-        authType: interfaces_1.AUTH_TYPE_JWT, // Always JWT for x-sap-destination
+        priority: interfaces_auth_sap_1.AuthMethodPriority.SAP_DESTINATION,
+        authType: interfaces_auth_1.AUTH_TYPE_JWT, // Always JWT for x-sap-destination
         sapUrl: '', // URL will be loaded from destination (service key or .env)
         sapClient,
         destination,
@@ -113,19 +116,20 @@ function validateSapDestinationAuth(headers) {
  */
 function validateMcpDestinationAuth(headers, sapUrl) {
     // Check both lowercase and original case (Node.js normalizes to lowercase, but check both for safety)
-    const destinationRaw = headers[interfaces_1.HEADER_MCP_DESTINATION.toLowerCase()] || headers[interfaces_1.HEADER_MCP_DESTINATION];
+    const destinationRaw = headers[interfaces_network_1.HEADER_MCP_DESTINATION.toLowerCase()] ||
+        headers[interfaces_network_1.HEADER_MCP_DESTINATION];
     if (!destinationRaw) {
         return null;
     }
-    const destination = getHeaderValue(headers, interfaces_1.HEADER_MCP_DESTINATION);
+    const destination = getHeaderValue(headers, interfaces_network_1.HEADER_MCP_DESTINATION);
     const errors = [];
     const warnings = [];
     // Validate destination name (check if empty after trim)
     if (!destination || destination.length === 0) {
-        errors.push(`${interfaces_1.HEADER_MCP_DESTINATION} header is empty`);
+        errors.push(`${interfaces_network_1.HEADER_MCP_DESTINATION} header is empty`);
         return {
-            priority: interfaces_1.AuthMethodPriority.NONE,
-            authType: interfaces_1.AUTH_TYPE_JWT, // MCP destination always uses JWT
+            priority: interfaces_auth_sap_1.AuthMethodPriority.NONE,
+            authType: interfaces_auth_1.AUTH_TYPE_JWT, // MCP destination always uses JWT
             sapUrl: '', // URL will be loaded from destination
             errors,
             warnings,
@@ -133,23 +137,23 @@ function validateMcpDestinationAuth(headers, sapUrl) {
     }
     // Warning if x-sap-url is provided (URL comes from destination, not header)
     if (sapUrl) {
-        warnings.push(`${interfaces_1.HEADER_SAP_URL} is ignored when ${interfaces_1.HEADER_MCP_DESTINATION} is present (URL is loaded from destination service key or .env file)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_URL} is ignored when ${interfaces_network_1.HEADER_MCP_DESTINATION} is present (URL is loaded from destination service key or .env file)`);
     }
     // Warning if x-sap-auth-type is provided (not needed for x-mcp-destination)
-    const authType = getHeaderValue(headers, interfaces_1.HEADER_SAP_AUTH_TYPE);
+    const authType = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_AUTH_TYPE);
     if (authType) {
-        warnings.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} is ignored when ${interfaces_1.HEADER_MCP_DESTINATION} is present (always uses JWT)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} is ignored when ${interfaces_network_1.HEADER_MCP_DESTINATION} is present (always uses JWT)`);
     }
     // Extract optional SAP client
-    const sapClient = getHeaderValue(headers, interfaces_1.HEADER_SAP_CLIENT);
+    const sapClient = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_CLIENT);
     // Warning if direct JWT token is also provided (destination takes priority)
-    const jwtToken = getHeaderValue(headers, interfaces_1.HEADER_SAP_JWT_TOKEN);
+    const jwtToken = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_JWT_TOKEN);
     if (jwtToken) {
-        warnings.push(`${interfaces_1.HEADER_SAP_JWT_TOKEN} is ignored when ${interfaces_1.HEADER_MCP_DESTINATION} is present (destination-based auth takes priority)`);
+        warnings.push(`${interfaces_network_1.HEADER_SAP_JWT_TOKEN} is ignored when ${interfaces_network_1.HEADER_MCP_DESTINATION} is present (destination-based auth takes priority)`);
     }
     return {
-        priority: interfaces_1.AuthMethodPriority.MCP_DESTINATION,
-        authType: interfaces_1.AUTH_TYPE_JWT, // Always JWT for x-mcp-destination
+        priority: interfaces_auth_sap_1.AuthMethodPriority.MCP_DESTINATION,
+        authType: interfaces_auth_1.AUTH_TYPE_JWT, // Always JWT for x-mcp-destination
         sapUrl: '', // URL will be loaded from destination (service key or .env)
         sapClient,
         destination,
@@ -165,10 +169,10 @@ function validateMcpDestinationAuth(headers, sapUrl) {
  * and only used for token refresh - they are a separate set of headers.
  */
 function validateDirectJwtAuth(headers, sapUrl, authType) {
-    if (authType !== interfaces_1.AUTH_TYPE_JWT && authType !== interfaces_1.AUTH_TYPE_XSUAA) {
+    if (authType !== interfaces_auth_1.AUTH_TYPE_JWT && authType !== interfaces_auth_sap_1.AUTH_TYPE_XSUAA) {
         return null;
     }
-    const jwtToken = getHeaderValue(headers, interfaces_1.HEADER_SAP_JWT_TOKEN);
+    const jwtToken = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_JWT_TOKEN);
     if (!jwtToken) {
         return null;
     }
@@ -176,25 +180,28 @@ function validateDirectJwtAuth(headers, sapUrl, authType) {
     const warnings = [];
     // Validate JWT token format (basic check - should start with eyJ)
     if (jwtToken.length < 10) {
-        errors.push(`${interfaces_1.HEADER_SAP_JWT_TOKEN} appears to be invalid (too short)`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_JWT_TOKEN} appears to be invalid (too short)`);
     }
     // Extract optional refresh token
-    const refreshToken = getHeaderValue(headers, interfaces_1.HEADER_SAP_REFRESH_TOKEN);
+    const refreshToken = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_REFRESH_TOKEN);
     // Extract optional UAA config (for token refresh only - separate set of headers)
     // These are optional and don't affect authorization validation
-    const uaaUrl = getHeaderValue(headers, interfaces_1.HEADER_SAP_UAA_URL) || getHeaderValue(headers, interfaces_1.HEADER_UAA_URL);
-    const uaaClientId = getHeaderValue(headers, interfaces_1.HEADER_SAP_UAA_CLIENT_ID) || getHeaderValue(headers, interfaces_1.HEADER_UAA_CLIENT_ID);
-    const uaaClientSecret = getHeaderValue(headers, interfaces_1.HEADER_SAP_UAA_CLIENT_SECRET) || getHeaderValue(headers, interfaces_1.HEADER_UAA_CLIENT_SECRET);
+    const uaaUrl = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_UAA_URL) ||
+        getHeaderValue(headers, interfaces_network_1.HEADER_UAA_URL);
+    const uaaClientId = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_UAA_CLIENT_ID) ||
+        getHeaderValue(headers, interfaces_network_1.HEADER_UAA_CLIENT_ID);
+    const uaaClientSecret = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_UAA_CLIENT_SECRET) ||
+        getHeaderValue(headers, interfaces_network_1.HEADER_UAA_CLIENT_SECRET);
     // Validate UAA config completeness if any UAA header is present
     if (uaaUrl || uaaClientId || uaaClientSecret) {
         if (!uaaUrl || !uaaClientId || !uaaClientSecret) {
-            warnings.push(`UAA headers (${interfaces_1.HEADER_SAP_UAA_URL}, ${interfaces_1.HEADER_SAP_UAA_CLIENT_ID}, ${interfaces_1.HEADER_SAP_UAA_CLIENT_SECRET}) should be provided together for token refresh`);
+            warnings.push(`UAA headers (${interfaces_network_1.HEADER_SAP_UAA_URL}, ${interfaces_network_1.HEADER_SAP_UAA_CLIENT_ID}, ${interfaces_network_1.HEADER_SAP_UAA_CLIENT_SECRET}) should be provided together for token refresh`);
         }
     }
     // Extract optional SAP client
-    const sapClient = getHeaderValue(headers, interfaces_1.HEADER_SAP_CLIENT);
+    const sapClient = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_CLIENT);
     return {
-        priority: interfaces_1.AuthMethodPriority.DIRECT_JWT,
+        priority: interfaces_auth_sap_1.AuthMethodPriority.DIRECT_JWT,
         authType,
         sapUrl,
         sapClient,
@@ -211,29 +218,29 @@ function validateDirectJwtAuth(headers, sapUrl, authType) {
  * Validate basic authentication (lowest priority)
  */
 function validateBasicAuth(headers, sapUrl, authType) {
-    if (authType !== interfaces_1.AUTH_TYPE_BASIC) {
+    if (authType !== interfaces_auth_1.AUTH_TYPE_BASIC) {
         return null;
     }
-    const usernameRaw = headers[interfaces_1.HEADER_SAP_LOGIN.toLowerCase()] || headers[interfaces_1.HEADER_SAP_LOGIN];
-    const passwordRaw = headers[interfaces_1.HEADER_SAP_PASSWORD.toLowerCase()] || headers[interfaces_1.HEADER_SAP_PASSWORD];
+    const usernameRaw = headers[interfaces_network_1.HEADER_SAP_LOGIN.toLowerCase()] || headers[interfaces_network_1.HEADER_SAP_LOGIN];
+    const passwordRaw = headers[interfaces_network_1.HEADER_SAP_PASSWORD.toLowerCase()] || headers[interfaces_network_1.HEADER_SAP_PASSWORD];
     if (!usernameRaw || !passwordRaw) {
         return null;
     }
-    const username = getHeaderValue(headers, interfaces_1.HEADER_SAP_LOGIN);
-    const password = getHeaderValue(headers, interfaces_1.HEADER_SAP_PASSWORD);
+    const username = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_LOGIN);
+    const password = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_PASSWORD);
     const errors = [];
     const warnings = [];
     // Validate username and password (check if empty after trim)
     if (!username || username.length === 0) {
-        errors.push(`${interfaces_1.HEADER_SAP_LOGIN} header is empty`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_LOGIN} header is empty`);
     }
     if (!password || password.length === 0) {
-        errors.push(`${interfaces_1.HEADER_SAP_PASSWORD} header is empty`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_PASSWORD} header is empty`);
     }
     // Return config with errors if validation failed
     if (errors.length > 0) {
         return {
-            priority: interfaces_1.AuthMethodPriority.NONE,
+            priority: interfaces_auth_sap_1.AuthMethodPriority.NONE,
             authType,
             sapUrl,
             errors,
@@ -241,7 +248,7 @@ function validateBasicAuth(headers, sapUrl, authType) {
         };
     }
     return {
-        priority: interfaces_1.AuthMethodPriority.BASIC,
+        priority: interfaces_auth_sap_1.AuthMethodPriority.BASIC,
         authType,
         sapUrl,
         username,
@@ -289,7 +296,7 @@ function validateAuthHeaders(headers) {
         }
     }
     // Check for MCP destination (doesn't require x-sap-url, URL comes from destination)
-    const sapUrl = getHeaderValue(headers, interfaces_1.HEADER_SAP_URL);
+    const sapUrl = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_URL);
     const mcpDestinationConfig = validateMcpDestinationAuth(headers, sapUrl);
     if (mcpDestinationConfig) {
         // MCP destination found - URL comes from destination, not header
@@ -321,7 +328,7 @@ function validateAuthHeaders(headers) {
     }
     // Validate URL format
     if (!isValidUrl(sapUrl)) {
-        errors.push(`${interfaces_1.HEADER_SAP_URL} is not a valid URL: ${sapUrl}`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_URL} is not a valid URL: ${sapUrl}`);
         return {
             isValid: false,
             errors,
@@ -332,29 +339,33 @@ function validateAuthHeaders(headers) {
     const configs = [];
     // Check if basic auth headers are present (x-sap-login, x-sap-password)
     // These should come together with x-sap-auth-type: basic
-    const hasSapLogin = !!getHeaderValue(headers, interfaces_1.HEADER_SAP_LOGIN);
-    const hasSapPassword = !!getHeaderValue(headers, interfaces_1.HEADER_SAP_PASSWORD);
+    const hasSapLogin = !!getHeaderValue(headers, interfaces_network_1.HEADER_SAP_LOGIN);
+    const hasSapPassword = !!getHeaderValue(headers, interfaces_network_1.HEADER_SAP_PASSWORD);
     const hasBasicAuthHeaders = hasSapLogin || hasSapPassword;
     if (hasBasicAuthHeaders && (!hasSapLogin || !hasSapPassword)) {
-        errors.push(`${interfaces_1.HEADER_SAP_LOGIN} and ${interfaces_1.HEADER_SAP_PASSWORD} must be provided together`);
+        errors.push(`${interfaces_network_1.HEADER_SAP_LOGIN} and ${interfaces_network_1.HEADER_SAP_PASSWORD} must be provided together`);
     }
     // 3. Other auth methods require x-sap-auth-type
-    const sapAuthType = getHeaderValue(headers, interfaces_1.HEADER_SAP_AUTH_TYPE);
+    const sapAuthType = getHeaderValue(headers, interfaces_network_1.HEADER_SAP_AUTH_TYPE);
     if (sapAuthType) {
         // Validate auth type
-        const validAuthTypes = [interfaces_1.AUTH_TYPE_JWT, interfaces_1.AUTH_TYPE_XSUAA, interfaces_1.AUTH_TYPE_BASIC];
+        const validAuthTypes = [
+            interfaces_auth_1.AUTH_TYPE_JWT,
+            interfaces_auth_sap_1.AUTH_TYPE_XSUAA,
+            interfaces_auth_1.AUTH_TYPE_BASIC,
+        ];
         const authType = sapAuthType.toLowerCase();
         if (!validAuthTypes.includes(authType)) {
-            errors.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} must be one of: ${validAuthTypes.join(', ')}, got: ${sapAuthType}`);
+            errors.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} must be one of: ${validAuthTypes.join(', ')}, got: ${sapAuthType}`);
         }
         else {
             // Check if basic auth headers are present but auth-type is not basic
-            if (hasBasicAuthHeaders && authType !== interfaces_1.AUTH_TYPE_BASIC) {
-                warnings.push(`${interfaces_1.HEADER_SAP_LOGIN} and ${interfaces_1.HEADER_SAP_PASSWORD} are present but ${interfaces_1.HEADER_SAP_AUTH_TYPE} is not "${interfaces_1.AUTH_TYPE_BASIC}"`);
+            if (hasBasicAuthHeaders && authType !== interfaces_auth_1.AUTH_TYPE_BASIC) {
+                warnings.push(`${interfaces_network_1.HEADER_SAP_LOGIN} and ${interfaces_network_1.HEADER_SAP_PASSWORD} are present but ${interfaces_network_1.HEADER_SAP_AUTH_TYPE} is not "${interfaces_auth_1.AUTH_TYPE_BASIC}"`);
             }
             // Check if auth-type is basic but headers are missing
-            if (authType === interfaces_1.AUTH_TYPE_BASIC && !hasBasicAuthHeaders) {
-                errors.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} is "${interfaces_1.AUTH_TYPE_BASIC}" but ${interfaces_1.HEADER_SAP_LOGIN} and ${interfaces_1.HEADER_SAP_PASSWORD} are missing`);
+            if (authType === interfaces_auth_1.AUTH_TYPE_BASIC && !hasBasicAuthHeaders) {
+                errors.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} is "${interfaces_auth_1.AUTH_TYPE_BASIC}" but ${interfaces_network_1.HEADER_SAP_LOGIN} and ${interfaces_network_1.HEADER_SAP_PASSWORD} are missing`);
             }
             // Only validate direct JWT and basic auth if MCP destination is not present
             // (MCP destination already handled above)
@@ -376,22 +387,22 @@ function validateAuthHeaders(headers) {
         // No auth-type provided
         // If basic auth headers are present, auth-type must be basic
         if (hasBasicAuthHeaders) {
-            errors.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} must be "${interfaces_1.AUTH_TYPE_BASIC}" when ${interfaces_1.HEADER_SAP_LOGIN} and ${interfaces_1.HEADER_SAP_PASSWORD} are present`);
+            errors.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} must be "${interfaces_auth_1.AUTH_TYPE_BASIC}" when ${interfaces_network_1.HEADER_SAP_LOGIN} and ${interfaces_network_1.HEADER_SAP_PASSWORD} are present`);
         }
         else if (!mcpDestinationConfig && !sapDestinationConfig) {
             // No auth-type and no destination - error
-            errors.push(`${interfaces_1.HEADER_SAP_AUTH_TYPE} header is required when ${interfaces_1.HEADER_SAP_DESTINATION_SERVICE} and ${interfaces_1.HEADER_MCP_DESTINATION} are not present`);
+            errors.push(`${interfaces_network_1.HEADER_SAP_AUTH_TYPE} header is required when ${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE} and ${interfaces_network_1.HEADER_MCP_DESTINATION} are not present`);
         }
     }
     // No valid authentication method found
     if (configs.length === 0) {
         if (sapAuthType) {
             const authType = sapAuthType.toLowerCase();
-            if (authType === interfaces_1.AUTH_TYPE_JWT || authType === interfaces_1.AUTH_TYPE_XSUAA) {
-                errors.push(`JWT authentication requires either ${interfaces_1.HEADER_SAP_DESTINATION_SERVICE}, ${interfaces_1.HEADER_MCP_DESTINATION}, or ${interfaces_1.HEADER_SAP_JWT_TOKEN} header`);
+            if (authType === interfaces_auth_1.AUTH_TYPE_JWT || authType === interfaces_auth_sap_1.AUTH_TYPE_XSUAA) {
+                errors.push(`JWT authentication requires either ${interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE}, ${interfaces_network_1.HEADER_MCP_DESTINATION}, or ${interfaces_network_1.HEADER_SAP_JWT_TOKEN} header`);
             }
-            else if (authType === interfaces_1.AUTH_TYPE_BASIC) {
-                errors.push(`Basic authentication requires ${interfaces_1.HEADER_SAP_LOGIN} and ${interfaces_1.HEADER_SAP_PASSWORD} headers`);
+            else if (authType === interfaces_auth_1.AUTH_TYPE_BASIC) {
+                errors.push(`Basic authentication requires ${interfaces_network_1.HEADER_SAP_LOGIN} and ${interfaces_network_1.HEADER_SAP_PASSWORD} headers`);
             }
         }
         else {
@@ -410,9 +421,9 @@ function validateAuthHeaders(headers) {
     // Select highest priority configuration
     const selectedConfig = configs.reduce((prev, current) => current.priority > prev.priority ? current : prev);
     // Check for conflicts (multiple auth methods with same priority shouldn't happen, but check anyway)
-    const samePriorityConfigs = configs.filter(c => c.priority === selectedConfig.priority);
+    const samePriorityConfigs = configs.filter((c) => c.priority === selectedConfig.priority);
     if (samePriorityConfigs.length > 1) {
-        warnings.push(`Multiple authentication methods with same priority detected, using: ${interfaces_1.AuthMethodPriority[selectedConfig.priority]}`);
+        warnings.push(`Multiple authentication methods with same priority detected, using: ${interfaces_auth_sap_1.AuthMethodPriority[selectedConfig.priority]}`);
     }
     // Merge errors and warnings
     const allErrors = [...errors, ...selectedConfig.errors];
@@ -448,29 +459,31 @@ function validateProxyHeaders(headers) {
             warnings: [],
         };
     }
-    const btpDestination = getHeaderValue(headers, interfaces_1.HEADER_BTP_DESTINATION);
-    const mcpDestination = getHeaderValue(headers, interfaces_1.HEADER_MCP_DESTINATION);
-    const mcpUrl = getHeaderValue(headers, interfaces_1.HEADER_MCP_URL);
+    const btpDestination = getHeaderValue(headers, interfaces_network_1.HEADER_BTP_DESTINATION);
+    const mcpDestination = getHeaderValue(headers, interfaces_network_1.HEADER_MCP_DESTINATION);
+    const mcpUrl = getHeaderValue(headers, interfaces_network_1.HEADER_MCP_URL);
     const hasBtpDestination = !!btpDestination;
     const hasMcpDestination = !!mcpDestination;
     const hasMcpUrl = !!mcpUrl;
     // Validate destination names if present
-    if (hasBtpDestination && (!btpDestination || btpDestination.trim().length === 0)) {
-        errors.push(`${interfaces_1.HEADER_BTP_DESTINATION} header is empty`);
+    if (hasBtpDestination &&
+        (!btpDestination || btpDestination.trim().length === 0)) {
+        errors.push(`${interfaces_network_1.HEADER_BTP_DESTINATION} header is empty`);
     }
-    if (hasMcpDestination && (!mcpDestination || mcpDestination.trim().length === 0)) {
-        errors.push(`${interfaces_1.HEADER_MCP_DESTINATION} header is empty`);
+    if (hasMcpDestination &&
+        (!mcpDestination || mcpDestination.trim().length === 0)) {
+        errors.push(`${interfaces_network_1.HEADER_MCP_DESTINATION} header is empty`);
     }
     // Validate mcpUrl format if present
-    if (hasMcpUrl) {
+    if (hasMcpUrl && mcpUrl) {
         if (!isValidUrl(mcpUrl)) {
-            errors.push(`${interfaces_1.HEADER_MCP_URL} is not a valid URL: ${mcpUrl}`);
+            errors.push(`${interfaces_network_1.HEADER_MCP_URL} is not a valid URL: ${mcpUrl}`);
         }
     }
     // At least one proxy header should be present for proxy routing
     const hasAnyProxyHeader = hasBtpDestination || hasMcpDestination || hasMcpUrl;
     if (!hasAnyProxyHeader) {
-        warnings.push(`No proxy headers found (${interfaces_1.HEADER_BTP_DESTINATION}, ${interfaces_1.HEADER_MCP_DESTINATION}, or ${interfaces_1.HEADER_MCP_URL})`);
+        warnings.push(`No proxy headers found (${interfaces_network_1.HEADER_BTP_DESTINATION}, ${interfaces_network_1.HEADER_MCP_DESTINATION}, or ${interfaces_network_1.HEADER_MCP_URL})`);
     }
     return {
         isValid: errors.length === 0,
@@ -497,7 +510,9 @@ function isProxyRequest(headers) {
         return false;
     }
     const validation = validateProxyHeaders(headers);
-    return validation.hasBtpDestination || validation.hasMcpDestination || validation.hasMcpUrl;
+    return (validation.hasBtpDestination ||
+        validation.hasMcpDestination ||
+        validation.hasMcpUrl);
 }
 /**
  * Check if headers indicate an MCP server request (not proxy)
@@ -514,13 +529,13 @@ function isMcpServerRequest(headers) {
         return false;
     }
     // Check for MCP authentication headers
-    const hasSapDestination = !!getHeaderValue(headers, interfaces_1.HEADER_SAP_DESTINATION_SERVICE);
-    const hasMcpDestination = !!getHeaderValue(headers, interfaces_1.HEADER_MCP_DESTINATION);
-    const hasSapUrl = !!getHeaderValue(headers, interfaces_1.HEADER_SAP_URL);
-    const hasSapJwtToken = !!getHeaderValue(headers, interfaces_1.HEADER_SAP_JWT_TOKEN);
+    const hasSapDestination = !!getHeaderValue(headers, interfaces_network_1.HEADER_SAP_DESTINATION_SERVICE);
+    const hasMcpDestination = !!getHeaderValue(headers, interfaces_network_1.HEADER_MCP_DESTINATION);
+    const hasSapUrl = !!getHeaderValue(headers, interfaces_network_1.HEADER_SAP_URL);
+    const hasSapJwtToken = !!getHeaderValue(headers, interfaces_network_1.HEADER_SAP_JWT_TOKEN);
     // Check for proxy-specific headers
-    const hasBtpDestination = !!getHeaderValue(headers, interfaces_1.HEADER_BTP_DESTINATION);
-    const hasMcpUrl = !!getHeaderValue(headers, interfaces_1.HEADER_MCP_URL);
+    const hasBtpDestination = !!getHeaderValue(headers, interfaces_network_1.HEADER_BTP_DESTINATION);
+    const hasMcpUrl = !!getHeaderValue(headers, interfaces_network_1.HEADER_MCP_URL);
     // MCP server request has MCP auth headers but no proxy headers
     const hasMcpAuthHeaders = hasSapDestination || hasMcpDestination || hasSapUrl || hasSapJwtToken;
     const hasProxyHeaders = hasBtpDestination || hasMcpUrl;

package/dist/index.d.ts

@@ -3,5 +3,5 @@
  *
  * Validates and prioritizes authentication headers for MCP ABAP ADT servers
  */
-export { validateAuthHeaders, validateProxyHeaders, isProxyRequest, isMcpServerRequest, type ProxyHeaderValidationResult, } from './headerValidator';
+export { isMcpServerRequest, isProxyRequest, type ProxyHeaderValidationResult, validateAuthHeaders, validateProxyHeaders, } from './headerValidator';
 export * from './types';

package/dist/index.js

@@ -19,10 +19,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isMcpServerRequest = exports.isProxyRequest = exports.validateProxyHeaders = exports.validateAuthHeaders = void 0;
+exports.validateProxyHeaders = exports.validateAuthHeaders = exports.isProxyRequest = exports.isMcpServerRequest = void 0;
 var headerValidator_1 = require("./headerValidator");
+Object.defineProperty(exports, "isMcpServerRequest", { enumerable: true, get: function () { return headerValidator_1.isMcpServerRequest; } });
+Object.defineProperty(exports, "isProxyRequest", { enumerable: true, get: function () { return headerValidator_1.isProxyRequest; } });
 Object.defineProperty(exports, "validateAuthHeaders", { enumerable: true, get: function () { return headerValidator_1.validateAuthHeaders; } });
 Object.defineProperty(exports, "validateProxyHeaders", { enumerable: true, get: function () { return headerValidator_1.validateProxyHeaders; } });
-Object.defineProperty(exports, "isProxyRequest", { enumerable: true, get: function () { return headerValidator_1.isProxyRequest; } });
-Object.defineProperty(exports, "isMcpServerRequest", { enumerable: true, get: function () { return headerValidator_1.isMcpServerRequest; } });
 __exportStar(require("./types"), exports);

package/dist/types.d.ts

@@ -1,8 +1,8 @@
 /**
  * Types for header validator
  */
-import type { AuthType } from '@mcp-abap-adt/interfaces';
-import { AuthMethodPriority, type IValidatedAuthConfig, type IHeaderValidationResult } from '@mcp-abap-adt/interfaces';
+import type { AuthType, IHeaderValidationResult, IValidatedAuthConfig } from '@mcp-abap-adt/interfaces-auth-sap';
+import { AuthMethodPriority } from '@mcp-abap-adt/interfaces-auth-sap';
 export type { AuthType };
 export { AuthMethodPriority };
 export type ValidatedAuthConfig = IValidatedAuthConfig;

package/dist/types.js

@@ -4,5 +4,5 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthMethodPriority = void 0;
-const interfaces_1 = require("@mcp-abap-adt/interfaces");
-Object.defineProperty(exports, "AuthMethodPriority", { enumerable: true, get: function () { return interfaces_1.AuthMethodPriority; } });
+const interfaces_auth_sap_1 = require("@mcp-abap-adt/interfaces-auth-sap");
+Object.defineProperty(exports, "AuthMethodPriority", { enumerable: true, get: function () { return interfaces_auth_sap_1.AuthMethodPriority; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/header-validator",
-  "version": "0.1.7",
+  "version": "0.3.0",
   "description": "Header validator for MCP ABAP ADT - validates and prioritizes authentication headers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,8 @@
     "dist",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "COPYING"
   ],
   "keywords": [
     "abap",
@@ -21,7 +22,7 @@
     "abap-adt"
   ],
   "author": "Oleksii Kyslytsia <oleksij.kyslytsja@gmail.com>",
-  "license": "MIT",
+  "license": "LGPL-3.0-only",
   "homepage": "https://github.com/fr0ster/mcp-abap-adt-header-validator#readme",
   "bugs": {
     "url": "https://github.com/fr0ster/mcp-abap-adt-header-validator/issues"
@@ -34,8 +35,12 @@
     "access": "public"
   },
   "scripts": {
+    "chrono": "./tools/version-stats.sh",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",
-    "build": "npm run clean --silent && npx tsc -p tsconfig.json",
+    "lint": "npx biome check --write src",
+    "lint:check": "npx biome check src",
+    "format": "npx biome format --write src",
+    "build": "npm run --silent clean && npx biome check src --diagnostic-level=error && npx tsc -p tsconfig.json",
     "build:fast": "npx tsc -p tsconfig.json",
     "test": "NODE_OPTIONS=--experimental-vm-modules jest",
     "test:check": "npx tsc --noEmit",
@@ -45,9 +50,12 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@mcp-abap-adt/interfaces": "^0.1.2"
+    "@mcp-abap-adt/interfaces-auth": "^1.2.0",
+    "@mcp-abap-adt/interfaces-auth-sap": "^1.0.0",
+    "@mcp-abap-adt/interfaces-network": "^2.0.0"
   },
   "devDependencies": {
+    "@biomejs/biome": "^2.3.10",
     "@types/jest": "^30.0.0",
     "@types/node": "^24.2.1",
     "jest": "^30.2.0",