@mcp-abap-adt/interfaces-adt 1.0.0 → 1.2.0

package/CHANGELOG.md

@@ -5,7 +5,77 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [1.2.0] - 2026-09-21
+
+### Added
+
+- **`IAbapObjectEntry` — one entry in a transport request's object list**, as
+  the CTS object directory holds it: `pgmid`, `type`, `name`, and optionally
+  the description and the position within a task.
+
+  **Not `IObjectReference`, though they look alike.** That one is ADT's
+  vocabulary — its `type` is an ADT object type code such as `CLAS/OC`, and it
+  carries a `uri` and a `parentName`. The object directory speaks another: a
+  program id, a short type and a name, `R3TR FUGR ZMCP_BLD_FGR_H1`. Merging
+  them would produce a type where half the fields are always wrong and `type`
+  means one thing or the other depending on which member was called.
+
+  A request parameter, which is why it is here — the same reason
+  `IObjectReference` survived 31.0.0 while the result shapes left: a consumer
+  cannot call a member that takes one without being able to name the type.
+
+- **`IAdtTransportObjectActions<TRemoved, TAdded, TTask, TActionLog>`** —
+  `removeObject`, `addObject`, `createTask` and `readActionLog`.
+
+  A transport listing already answers every `atom:link` a request and its
+  tasks carry — `release`, `addobject`, `changeowner`, `newtask` — so that a
+  caller follows an href rather than assembling a URL. Handing over the
+  addresses of operations while declaring nothing that performs one leaves the
+  caller building `tm:root` documents by hand, which is the layering this
+  package exists to prevent.
+
+  What it costs to lack them, measured on an on-premise system: deleting an
+  ABAP object does not free its name, because the object-directory entry stays
+  on the request that carried it. Until it is detached a create of the same
+  name is refused with `CTS_WBO_API 019` — even passing that same request as
+  `corrNr` — and the ways out are releasing the whole request, shipping
+  everything else in it, or SE09. Reported as fr0ster/mcp-abap-adt#221,
+  implemented in fr0ster/mcp-abap-adt-clients#151.
+
+  Four members and no composite: the order a caller uses them in, and what
+  they do when `addObject` is refused, is theirs.
+
+## [1.1.0] - 2026-09-19
+
+### Added
+
+- **`IAssertionValidator`** — establishes that a SAML assertion is genuine,
+  addressed to the caller, currently valid, and answers a request that was
+  actually made, rejecting by throwing with a reason naming the check that
+  failed. Validation is a strategy, like everything else pluggable here: a
+  consumer with a trust model this package cannot anticipate can replace it
+  wholesale, while the shipped default (arriving in a later `auth-providers`
+  release) verifies the signature and refuses anything it cannot place.
+- **`AssertionContext`** — what a provider knows about the login an assertion
+  is answering: the expected `InResponseTo`, the audience, the ACS URL, and an
+  optional trusted issuer for a validator that establishes trust some other way.
+- **`ValidatedAssertion`** — what a validated assertion yields: an expiry that
+  is never later than either the assertion's own `Conditions` or the bearer
+  confirmation that was accepted, identity fields, and both the raw wire
+  response and the signed XML that verified — kept distinct because holding the
+  former does not make every byte of it trustworthy.
+- **`IAssertionReplayStore`** and **`AssertionReplayKey`** — remembers
+  assertions so a replay is refused, keyed by issuer and assertion ID together,
+  since an assertion ID is unique only within the identity provider that minted
+  it.
+- **`ASSERTION_ERROR_CODES`** and **`AssertionErrorCode`** — the codes an
+  assertion validator refuses with, starting with `ASSERTION_VALIDATION_ERROR`.
+  They are their own set rather than additions to `TOKEN_PROVIDER_ERROR_CODES`:
+  that set describes what can go wrong with ANY token provider, and SAML is one
+  authentication mechanism among several, so it must not widen a contract every
+  provider shares. A mechanism brings its own codes, as the store and network
+  layers already do. Existing declarations are therefore untouched, and
+  `tools/baseline-44.0.0.json` needs no regeneration.
 
 ## [1.0.0] - 2026-09-16
 

package/README.md

@@ -4,7 +4,7 @@ ADT contracts, the ABAP and Cloud ALM connections, and SAP/BTP configuration and
 
 ## TL;DR
 
-- Everything a package on the SAP side accepts: ADT object operations, runtime analysis, execution, feeds, services, the ABAP and Cloud ALM connections, SAP/BTP configuration, token providers, session and service-key stores, header validation, and the SAP/BTP header names.
+- Everything a package on the SAP side accepts: ADT object operations, runtime analysis, execution, feeds, services, the ABAP and Cloud ALM connections, SAP/BTP configuration, token providers, SAML assertion validation, session and service-key stores, header validation, and the SAP/BTP header names.
 - Depends on `@mcp-abap-adt/interfaces-auth` and `@mcp-abap-adt/interfaces-utils` only. Types and constants; no implementation.
 - Moved unchanged from `@mcp-abap-adt/interfaces` 44.0.0. Most majors of that package came from these contracts; this package now carries them alone.
 
@@ -20,11 +20,11 @@ npm install @mcp-abap-adt/interfaces-adt
 |---|---|
 | `adt/`, `runtime/`, `execution/`, `feeds/`, `service/`, `shared/` | the ADT contracts: capability atoms, object types, `IAdtResponse`, runtime analysis, execution |
 | `connection/` | `IAbapConnection`, `IAbapRequestOptions`, the connection capability atoms, `ICalmConnection`, `CalmService` |
-| `sap/`, `auth/` | `ISapConfig`, `IConnectionConfig`, `IAuthorizationConfig`, `IConfig`, `IAuthorizationStrategy`, the callback-server contracts, `ICertificateMaterialLoader`, `AuthTypeEnum` |
+| `sap/`, `auth/` | `ISapConfig`, `IConnectionConfig`, `IAuthorizationConfig`, `IConfig`, `IAuthorizationStrategy`, the callback-server contracts, `ICertificateMaterialLoader`, `AuthTypeEnum`; `IAssertionValidator` with `AssertionContext`, `ValidatedAssertion`, `IAssertionReplayStore` and `ASSERTION_ERROR_CODES` |
 | `token/`, `session/`, `serviceKey/`, `store/` | token providers and refreshers, stores and their error codes |
 | `validation/`, `Headers.ts` | header validation; `HEADER_SAP_*`, `HEADER_UAA_*`, `HEADER_BTP_DESTINATION`, `HEADER_MCP_DESTINATION`, `HEADER_MCP_URL`, `AUTH_TYPES`, `AuthType` |
 
-The contract rules — what a member answers, how a strategy is supplied, how a contract is built — are in [`docs/architecture/ARCHITECTURE.md`](../../docs/architecture/ARCHITECTURE.md). Domain-by-domain documentation with examples stays in the [`@mcp-abap-adt/interfaces` README](../interfaces/README.md); the contracts it describes are these.
+The contract rules — what a member answers, how a strategy is supplied, how a contract is built — are in [`docs/architecture/ARCHITECTURE.md`](../../docs/architecture/ARCHITECTURE.md). Domain-by-domain documentation with examples stays in the [`@mcp-abap-adt/interfaces` README](../interfaces/README.md); the contracts it describes are these. Contracts added after the split are documented here only — the facade is frozen at its 44.0.0 surface and does not export them.
 
 ## Coming from `@mcp-abap-adt/interfaces`
 

package/dist/adt/IAdtTransport.d.ts

@@ -1,7 +1,8 @@
 /**
  * Transport ADT operation parameter interfaces (snake_case, low-level)
  */
-import type { IAdtResponse } from './IAdtResponse';
+import type { IAdtOperationOptions } from './IAdtObject';
+import type { IAdtError, IAdtResponse } from './IAdtResponse';
 export interface ICreateTransportParams {
     transport_type?: string;
     description: string;
@@ -101,4 +102,92 @@ export interface IAdtRequest<TList> {
      */
     list(options?: IListTransportsOptions): Promise<IAdtResponse<TList>>;
 }
+/**
+ * One entry in a transport request's object list, as the CTS object directory
+ * holds it.
+ *
+ * **Not {@link IObjectReference}, though they look alike.** That one is ADT's
+ * vocabulary — its `type` is an ADT object type code such as `CLAS/OC`, and it
+ * carries a `uri` and a `parentName`. The object directory speaks a different
+ * one: a program id, a two-to-four letter type and a name, `R3TR FUGR
+ * ZMCP_BLD_FGR_H1`. Merging them would produce a type where half the fields
+ * are always wrong and `type` means one thing or another depending on which
+ * member was called.
+ *
+ * **A request parameter, which is why it belongs here** — the same reason
+ * `IObjectReference` survived 31.0.0 while the result shapes left: a consumer
+ * cannot call a member that takes one without being able to name the type.
+ */
+export interface IAbapObjectEntry {
+    /** `tm:name` — the object's name, e.g. `ZCL_MY_CLASS`. */
+    name: string;
+    /** `tm:type` — the object-directory type, e.g. `CLAS`, `FUGR`, `TABL`. */
+    type: string;
+    /**
+     * `tm:pgmid` — the program id, `R3TR` for a workbench object.
+     *
+     * Optional because an implementation may default it, not because the wire
+     * omits it.
+     */
+    pgmid?: string;
+    /** `tm:obj_desc` — the description ADT shows beside the entry. */
+    description?: string;
+    /** `tm:position` — the entry's position in the task, e.g. `000025`. */
+    position?: string;
+}
+/**
+ * What can be done to a request's object list, and to its tasks.
+ *
+ * **Why these are contracts at all.** A transport listing already answers
+ * every `atom:link` a request and its tasks carry — `release`, `addobject`,
+ * `changeowner`, `newtask` — so that a caller follows an href rather than
+ * assembling a URL. Handing over the addresses of operations while declaring
+ * nothing that performs one leaves the caller building `tm:root` documents by
+ * hand, which is the layering this package exists to prevent.
+ *
+ * **What it costs to lack them.** Deleting an ABAP object does not free its
+ * name: the object-directory entry stays on the request that carried it, and
+ * until it is detached a create of the same name is refused with
+ * `CTS_WBO_API 019` — even passing that same request as `corrNr`. Without
+ * `removeObject` the ways out are releasing the whole request, shipping
+ * everything else in it, or SE09.
+ *
+ * Four members and no composite: the order a caller uses them in, and what
+ * they do when `addObject` is refused, is theirs.
+ */
+export interface IAdtTransportObjectActions<TRemoved, TAdded, TTask, TActionLog> {
+    /**
+     * Detach one object from a request or task.
+     *
+     * Addressed at the **task** that holds the object: a request's objects live
+     * on its tasks. The answer echoes the object it was asked about and says
+     * nothing else, so {@link IAdtTransportObjectActions.readActionLog} is what
+     * confirms the removal happened.
+     */
+    removeObject<E extends IAdtError = IAdtError>(transportNumber: string, object: IAbapObjectEntry, options?: IAdtOperationOptions<E>): Promise<IAdtResponse<TRemoved, E>>;
+    /**
+     * Attach one object to a request or task.
+     *
+     * Refused when the object is already held by an unrelated task — a third
+     * lock flavour, distinct from the enqueue lock and from the
+     * request-versus-task one. That refusal is the server's verdict to read,
+     * not a state an implementation checks for first.
+     */
+    addObject<E extends IAdtError = IAdtError>(transportNumber: string, object: IAbapObjectEntry, options?: IAdtOperationOptions<E>): Promise<IAdtResponse<TAdded, E>>;
+    /**
+     * Create a task under a request.
+     *
+     * The new task is itself a request resource: it reads, writes and releases
+     * like one, and {@link IAdtTransportObjectActions.removeObject} addresses it
+     * directly. With no `targetUser` the server decides whose task it is.
+     */
+    createTask<E extends IAdtError = IAdtError>(transportNumber: string, options?: {
+        targetUser?: string;
+    } & IAdtOperationOptions<E>): Promise<IAdtResponse<TTask, E>>;
+    /**
+     * What has happened to this request: created, object added, object deleted,
+     * owner changed — one entry per event.
+     */
+    readActionLog<E extends IAdtError = IAdtError>(transportNumber: string, options?: IAdtOperationOptions<E>): Promise<IAdtResponse<TActionLog, E>>;
+}
 //# sourceMappingURL=IAdtTransport.d.ts.map

package/dist/adt/IAdtTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IAdtTransport.d.ts","sourceRoot":"","sources":["../../src/adt/IAdtTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,mFAAmF;AACnF,eAAO,MAAM,mCAAmC,yEACwB,CAAC;AAGzE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAGD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW,CAAC,KAAK;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;CACtE"}
+{"version":3,"file":"IAdtTransport.d.ts","sourceRoot":"","sources":["../../src/adt/IAdtTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9D,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,mFAAmF;AACnF,eAAO,MAAM,mCAAmC,yEACwB,CAAC;AAGzE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAGD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW,CAAC,KAAK;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;CACtE;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,0BAA0B,CACzC,QAAQ,EACR,MAAM,EACN,KAAK,EACL,UAAU;IAEV;;;;;;;OAOG;IACH,YAAY,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAC1C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC;;;;;;;OAOG;IACH,SAAS,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EACvC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EACxC,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAC1D,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC;;;OAGG;IACH,aAAa,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAC3C,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;CACzC"}

package/dist/auth/AssertionErrorCodes.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Error codes for assertion validation
+ * Used by an IAssertionValidator to say which check refused the assertion
+ *
+ * Deliberately separate from TOKEN_PROVIDER_ERROR_CODES: that set describes what
+ * can go wrong with ANY token provider, so a single authentication mechanism
+ * must not widen it. A mechanism brings its own codes, as stores and the
+ * network layer already do.
+ */
+export declare const ASSERTION_ERROR_CODES: {
+    /** A SAML assertion failed validation and was refused */
+    readonly VALIDATION_ERROR: "ASSERTION_VALIDATION_ERROR";
+};
+export type AssertionErrorCode = (typeof ASSERTION_ERROR_CODES)[keyof typeof ASSERTION_ERROR_CODES];
+//# sourceMappingURL=AssertionErrorCodes.d.ts.map

package/dist/auth/AssertionErrorCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AssertionErrorCodes.d.ts","sourceRoot":"","sources":["../../src/auth/AssertionErrorCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,qBAAqB;IAChC,yDAAyD;;CAEjD,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/auth/AssertionErrorCodes.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * Error codes for assertion validation
+ * Used by an IAssertionValidator to say which check refused the assertion
+ *
+ * Deliberately separate from TOKEN_PROVIDER_ERROR_CODES: that set describes what
+ * can go wrong with ANY token provider, so a single authentication mechanism
+ * must not widen it. A mechanism brings its own codes, as stores and the
+ * network layer already do.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSERTION_ERROR_CODES = void 0;
+exports.ASSERTION_ERROR_CODES = {
+    /** A SAML assertion failed validation and was refused */
+    VALIDATION_ERROR: 'ASSERTION_VALIDATION_ERROR',
+};

package/dist/auth/IAssertionValidator.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Establishing that a SAML assertion may be trusted.
+ *
+ * Validation is a strategy for the same reason everything else here is: a
+ * consumer may have a trust model this package cannot anticipate. The shipped
+ * default verifies the signature and refuses anything it cannot place; a
+ * consumer replacing it takes on that duty entirely.
+ */
+import type { ILogger } from '@mcp-abap-adt/interfaces-utils';
+/** What the provider knows about the login the assertion is answering. */
+export interface AssertionContext {
+    /** The AuthnRequest ID this response must answer. */
+    readonly expectedInResponseTo: string;
+    /** Our entity ID, which the AudienceRestriction must name. */
+    readonly audience: string;
+    /** The ACS the response arrived at; Recipient and Destination must match. */
+    readonly acsUrl: string;
+    /**
+     * Trusted issuer; the assertion's `Issuer` must equal it.
+     *
+     * Optional on the interface because a custom validator may establish trust
+     * without it. The shipped default always receives it.
+     */
+    readonly expectedIssuer?: string;
+    /** For progress messages. Absent means silence — never stdout. */
+    readonly logger?: ILogger;
+}
+/** What a validated assertion yields to the flow. */
+export interface ValidatedAssertion {
+    /**
+     * The earlier of `Conditions/@NotOnOrAfter` and the `NotOnOrAfter` of the
+     * bearer confirmation that was accepted — never later than either, so a
+     * session cannot outlive a window the assertion itself closed.
+     */
+    readonly expiresAt: Date;
+    readonly assertionId: string;
+    readonly issuer: string;
+    readonly nameId?: string;
+    readonly sessionIndex?: string;
+    readonly attributes?: Readonly<Record<string, readonly string[]>>;
+    /**
+     * The response exactly as it arrived, for a flow that must forward it
+     * verbatim.
+     *
+     * **The wire payload, not a validated artifact.** It is the whole
+     * `samlp:Response`, and under `createSignedAssertionValidator` that includes
+     * `Status`, `Response/Issuer` and `Destination`, which nothing read and
+     * nothing checked. Holding a `ValidatedAssertion` does not make every byte
+     * of `raw` trustworthy.
+     */
+    readonly raw: string;
+    /**
+     * The signed element, serialised: the `Assertion`, or the `Response` when
+     * that is what the signature covered.
+     *
+     * Everything here is inside the signature that verified. A consumer wanting
+     * anything this interface does not surface should parse this rather than
+     * `raw` — the difference between them is the difference between "signed"
+     * and "arrived".
+     */
+    readonly signedXml: string;
+}
+/**
+ * Establishes that an assertion is genuine, addressed to us, currently valid,
+ * and answers a request we made. Rejects by throwing, with a reason naming the
+ * check that failed.
+ */
+export interface IAssertionValidator {
+    validate(samlResponse: string, context: AssertionContext): Promise<ValidatedAssertion>;
+}
+/**
+ * What identifies an assertion for replay purposes.
+ *
+ * An assertion's `ID` is unique only within the identity provider that minted
+ * it, so a store shared by two providers would reject a perfectly good second
+ * login the moment two issuers happened to mint the same `_id`. The key is the
+ * pair, never the ID alone.
+ */
+export interface AssertionReplayKey {
+    readonly issuer: string;
+    readonly assertionId: string;
+}
+/** Remembers assertions so a replay is refused. */
+export interface IAssertionReplayStore {
+    /**
+     * Records this key if it is not already recorded, and reports which
+     * happened: `true` when newly recorded, `false` when already present — a
+     * replay.
+     *
+     * **Must be atomic.** Two validations of the same assertion running at once
+     * must not both be told `true`; a check followed by a separate write is a
+     * race, and it is precisely the race a replay exploits.
+     *
+     * `retainUntil` is the last instant a validator would still accept the
+     * assertion — its expiry plus any clock skew allowed — not its expiry. An
+     * entry dropped earlier reopens the window in which a replay is accepted.
+     */
+    recordIfUnseen(key: AssertionReplayKey, retainUntil: Date): Promise<boolean>;
+}
+//# sourceMappingURL=IAssertionValidator.d.ts.map

package/dist/auth/IAssertionValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAssertionValidator.d.ts","sourceRoot":"","sources":["../../src/auth/IAssertionValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAE9D,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CACN,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9E"}

package/dist/auth/IAssertionValidator.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * Establishing that a SAML assertion may be trusted.
+ *
+ * Validation is a strategy for the same reason everything else here is: a
+ * consumer may have a trust model this package cannot anticipate. The shipped
+ * default verifies the signature and refuses anything it cannot place; a
+ * consumer replacing it takes on that duty entirely.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/index.d.ts

@@ -43,11 +43,14 @@ export type { ICreateStructureParams, IDeleteStructureParams, IStructureConfig,
 export type { ICreateTableParams, IDeleteTableParams, ITableConfig, IUpdateTableParams, } from './adt/IAdtTable';
 export type { ICreateTableTypeParams, IDeleteTableTypeParams, ITableTypeConfig, IUpdateTableTypeParams, TableTypeAccessType, TableTypePrimaryKeyDefinition, TableTypePrimaryKeyKind, TableTypeRowKind, } from './adt/IAdtTableType';
 export type { ICreateTransformationParams, IDeleteTransformationParams, ITransformationConfig, IUpdateTransformationParams, TransformationType, } from './adt/IAdtTransformation';
-export type { IAdtRequest, ICreateTransportParams, IListTransportsOptions, IListTransportsParams, ITransportConfig, ITransportSearchConfiguration, } from './adt/IAdtTransport';
+export type { IAbapObjectEntry, IAdtRequest, IAdtTransportObjectActions, ICreateTransportParams, IListTransportsOptions, IListTransportsParams, ITransportConfig, ITransportSearchConfiguration, } from './adt/IAdtTransport';
 export { TRANSPORT_SEARCH_CONFIGURATIONS_URL } from './adt/IAdtTransport';
 export type { ICdsTestDoubleCheckable, ICdsUnitTestConfig, IClassUnitTestDefinition, IClassUnitTestRunOptions, ITestRunInformation, IUnitTestConfig, IUnitTestDuration, IUnitTestResultOptions, IUnitTestRiskLevel, IUnitTestScope, } from './adt/IAdtUnitTest';
 export type { IAdtDataPreview, IAdtDiscovery, IAdtGroupLifecycle, IAdtInformationSystem, IAdtObjectAccess, IAdtObjectSearch, IAdtRepositoryStructure, IAdtTypeCatalogue, IAdtVirtualFolders, IAdtWhereUsed, IGetNodeContentsOptions, } from './adt/IAdtUtilities';
+export type { AssertionErrorCode } from './auth/AssertionErrorCodes';
+export { ASSERTION_ERROR_CODES } from './auth/AssertionErrorCodes';
 export type { AuthType as AuthTypeEnum } from './auth/AuthType';
+export type { AssertionContext, AssertionReplayKey, IAssertionReplayStore, IAssertionValidator, ValidatedAssertion, } from './auth/IAssertionValidator';
 export type { IAuthorizationConfig } from './auth/IAuthorizationConfig';
 export type { AuthorizationOutcome, AuthorizationRequest, IAuthorizationStrategy, } from './auth/IAuthorizationStrategy';
 export type { CallbackServerFactory, ICallbackServerHandle, ICallbackServerOptions, } from './auth/ICallbackServer';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EACV,+BAA+B,EAC/B,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,oCAAoC,EACpC,yBAAyB,EACzB,+BAA+B,EAC/B,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yCAAyC,EACzC,yCAAyC,EACzC,mCAAmC,EACnC,yCAAyC,EACzC,oBAAoB,GACrB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,gCAAgC,EAChC,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAC1E,YAAY,EACV,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EACV,eAAe,EACf,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,YAAY,EACV,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,cAAc,EACd,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,eAAe,EACf,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EACV,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,eAAe,EACf,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EACV,SAAS,EACT,oBAAoB,EACpB,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,YAAY,EACV,6BAA6B,EAC7B,0BAA0B,EAC1B,6BAA6B,EAC7B,sCAAsC,EACtC,4CAA4C,EAC5C,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,EACrB,mCAAmC,EACnC,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EACV,+BAA+B,EAC/B,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,oCAAoC,EACpC,yBAAyB,EACzB,+BAA+B,EAC/B,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yCAAyC,EACzC,yCAAyC,EACzC,mCAAmC,EACnC,yCAAyC,EACzC,oBAAoB,GACrB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,gCAAgC,EAChC,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,WAAW,EACX,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAC1E,YAAY,EACV,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EACV,eAAe,EACf,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,YAAY,EACV,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,cAAc,EACd,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,eAAe,EACf,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EACV,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,eAAe,EACf,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EACV,SAAS,EACT,oBAAoB,EACpB,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,YAAY,EACV,6BAA6B,EAC7B,0BAA0B,EAC1B,6BAA6B,EAC7B,sCAAsC,EACtC,4CAA4C,EAC5C,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,EACrB,mCAAmC,EACnC,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/index.js

@@ -5,7 +5,7 @@
  * ADT contracts, the ABAP and Cloud ALM connections, and SAP/BTP configuration and authentication contracts.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthMethodPriority = exports.TOKEN_PROVIDER_ERROR_CODES = exports.AUTH_TYPE_USER_TOKEN = exports.AUTH_TYPE_SAML2_BEARER = exports.AUTH_TYPE_PASSWORD = exports.AUTH_TYPE_CLIENT_X509 = exports.AUTH_TYPE_CLIENT_CREDENTIALS = exports.AUTH_TYPE_AUTHORIZATION_CODE_PKCE = exports.AUTH_TYPE_AUTHORIZATION_CODE = exports.STORE_ERROR_CODES = exports.HEADER_UAA_URL = exports.HEADER_UAA_CLIENT_SECRET = exports.HEADER_UAA_CLIENT_ID = exports.HEADER_SAP_URL = exports.HEADER_SAP_UAA_URL = exports.HEADER_SAP_UAA_CLIENT_SECRET = exports.HEADER_SAP_UAA_CLIENT_ID = exports.HEADER_SAP_REFRESH_TOKEN = exports.HEADER_SAP_PASSWORD = exports.HEADER_SAP_LOGIN = exports.HEADER_SAP_JWT_TOKEN = exports.HEADER_SAP_DESTINATION_SERVICE = exports.HEADER_SAP_DESTINATION = exports.HEADER_SAP_CLIENT = exports.HEADER_SAP_AUTH_TYPE = exports.HEADER_MCP_URL = exports.HEADER_MCP_DESTINATION = exports.HEADER_BTP_DESTINATION = exports.AUTH_TYPES = exports.AUTH_TYPE_XSUAA = exports.AUTH_TYPE_JWT = exports.AUTH_TYPE_BASIC = exports.ADT_SESSION_ERROR = exports.CALM_SERVICES = exports.TRANSPORT_SEARCH_CONFIGURATIONS_URL = exports.SERVICE_BINDING_VARIANT_MAP = exports.ADT_NO_FAILURE = exports.AdtObjectErrorCodes = void 0;
+exports.AuthMethodPriority = exports.TOKEN_PROVIDER_ERROR_CODES = exports.AUTH_TYPE_USER_TOKEN = exports.AUTH_TYPE_SAML2_BEARER = exports.AUTH_TYPE_PASSWORD = exports.AUTH_TYPE_CLIENT_X509 = exports.AUTH_TYPE_CLIENT_CREDENTIALS = exports.AUTH_TYPE_AUTHORIZATION_CODE_PKCE = exports.AUTH_TYPE_AUTHORIZATION_CODE = exports.STORE_ERROR_CODES = exports.HEADER_UAA_URL = exports.HEADER_UAA_CLIENT_SECRET = exports.HEADER_UAA_CLIENT_ID = exports.HEADER_SAP_URL = exports.HEADER_SAP_UAA_URL = exports.HEADER_SAP_UAA_CLIENT_SECRET = exports.HEADER_SAP_UAA_CLIENT_ID = exports.HEADER_SAP_REFRESH_TOKEN = exports.HEADER_SAP_PASSWORD = exports.HEADER_SAP_LOGIN = exports.HEADER_SAP_JWT_TOKEN = exports.HEADER_SAP_DESTINATION_SERVICE = exports.HEADER_SAP_DESTINATION = exports.HEADER_SAP_CLIENT = exports.HEADER_SAP_AUTH_TYPE = exports.HEADER_MCP_URL = exports.HEADER_MCP_DESTINATION = exports.HEADER_BTP_DESTINATION = exports.AUTH_TYPES = exports.AUTH_TYPE_XSUAA = exports.AUTH_TYPE_JWT = exports.AUTH_TYPE_BASIC = exports.ADT_SESSION_ERROR = exports.CALM_SERVICES = exports.ASSERTION_ERROR_CODES = exports.TRANSPORT_SEARCH_CONFIGURATIONS_URL = exports.SERVICE_BINDING_VARIANT_MAP = exports.ADT_NO_FAILURE = exports.AdtObjectErrorCodes = void 0;
 var IAdtObject_1 = require("./adt/IAdtObject");
 Object.defineProperty(exports, "AdtObjectErrorCodes", { enumerable: true, get: function () { return IAdtObject_1.AdtObjectErrorCodes; } });
 var IAdtResponse_1 = require("./adt/IAdtResponse");
@@ -14,6 +14,8 @@ var IAdtServiceBinding_1 = require("./adt/IAdtServiceBinding");
 Object.defineProperty(exports, "SERVICE_BINDING_VARIANT_MAP", { enumerable: true, get: function () { return IAdtServiceBinding_1.SERVICE_BINDING_VARIANT_MAP; } });
 var IAdtTransport_1 = require("./adt/IAdtTransport");
 Object.defineProperty(exports, "TRANSPORT_SEARCH_CONFIGURATIONS_URL", { enumerable: true, get: function () { return IAdtTransport_1.TRANSPORT_SEARCH_CONFIGURATIONS_URL; } });
+var AssertionErrorCodes_1 = require("./auth/AssertionErrorCodes");
+Object.defineProperty(exports, "ASSERTION_ERROR_CODES", { enumerable: true, get: function () { return AssertionErrorCodes_1.ASSERTION_ERROR_CODES; } });
 var CalmService_1 = require("./connection/CalmService");
 Object.defineProperty(exports, "CALM_SERVICES", { enumerable: true, get: function () { return CalmService_1.CALM_SERVICES; } });
 var IConnectionCapabilities_1 = require("./connection/IConnectionCapabilities");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/interfaces-adt",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "ADT contracts, the ABAP and Cloud ALM connections, and SAP/BTP configuration and authentication contracts",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",