@mcp-abap-adt/proxy 0.1.4 → 0.1.8

package/dist/proxy/cloudLlmHubProxy.d.ts

@@ -1,61 +1,2 @@
-/**
- * Cloud LLM Hub Proxy - Proxies requests to cloud-llm-hub with JWT authentication
- *
- * For requests with x-sap-destination: "sk", proxies to cloud-llm-hub
- * with JWT token from auth-broker
- */
-import { AuthBroker } from "@mcp-abap-adt/auth-broker";
-import { RoutingDecision } from "../router/headerAnalyzer.js";
-import { ProxyConfig } from "../lib/config.js";
-export interface ProxyRequest {
-    method: string;
-    params?: any;
-    id?: string | number | null;
-    jsonrpc?: string;
-}
-export interface ProxyResponse {
-    jsonrpc: string;
-    id?: string | number | null;
-    result?: any;
-    error?: {
-        code: number;
-        message: string;
-        data?: any;
-    };
-}
-/**
- * Cloud LLM Hub Proxy Client
- */
-export declare class CloudLlmHubProxy {
-    private axiosInstance;
-    private authBroker;
-    private defaultBaseUrl;
-    private tokenCache;
-    private readonly TOKEN_CACHE_TTL;
-    private circuitBreaker;
-    private config;
-    constructor(defaultBaseUrl: string, authBroker: AuthBroker, config?: Partial<ProxyConfig>);
-    /**
-     * Get JWT token for destination from auth-broker with retry and token refresh
-     */
-    private getJwtToken;
-    /**
-     * Build proxy request with JWT tokens and SAP configuration
-     *
-     * Uses service keys:
-     * 1. x-btp-destination - for BTP Cloud authorization (Authorization: Bearer token) - OPTIONAL
-     * 2. x-mcp-destination - for SAP ABAP connection (SAP headers with token and config) - OPTIONAL
-     *
-     * Can work with only x-mcp-destination (without BTP) for local testing without authentication
-     */
-    private buildProxyRequest;
-    /**
-     * Proxy MCP request to cloud-llm-hub with retry, circuit breaker, and error handling
-     */
-    proxyRequest(originalRequest: ProxyRequest, routingDecision: RoutingDecision, originalHeaders: Record<string, string | string[] | undefined>): Promise<ProxyResponse>;
-}
-/**
- * Create Cloud LLM Hub Proxy instance
- */
-export declare function createCloudLlmHubProxy(cloudLlmHubUrl: string, config?: Partial<ProxyConfig>): Promise<CloudLlmHubProxy>;
+export {};
 //# sourceMappingURL=cloudLlmHubProxy.d.ts.map

package/dist/proxy/cloudLlmHubProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudLlmHubProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/cloudLlmHubProxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAc,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU3D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,UAAU,CAAgE;IAClF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAc;gBAEhB,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAmEzF;;OAEG;YACW,WAAW;IAwDzB;;;;;;;;OAQG;YACW,iBAAiB;IA4J/B;;OAEG;IACG,YAAY,CAChB,eAAe,EAAE,YAAY,EAC7B,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAC7D,OAAO,CAAC,aAAa,CAAC;CA2G1B;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAY3B"}
+{"version":3,"file":"cloudLlmHubProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/cloudLlmHubProxy.ts"],"names":[],"mappings":""}

package/dist/proxy/cloudLlmHubProxy.js

@@ -1,380 +1,3 @@
 "use strict";
-/**
- * Cloud LLM Hub Proxy - Proxies requests to cloud-llm-hub with JWT authentication
- *
- * For requests with x-sap-destination: "sk", proxies to cloud-llm-hub
- * with JWT token from auth-broker
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CloudLlmHubProxy = void 0;
-exports.createCloudLlmHubProxy = createCloudLlmHubProxy;
-const axios_1 = __importDefault(require("axios"));
-const auth_broker_1 = require("@mcp-abap-adt/auth-broker");
-const logger_js_1 = require("../lib/logger.js");
-const config_js_1 = require("../lib/config.js");
-const stores_js_1 = require("../lib/stores.js");
-const errorHandler_js_1 = require("../lib/errorHandler.js");
-/**
- * Cloud LLM Hub Proxy Client
- */
-class CloudLlmHubProxy {
-    axiosInstance;
-    authBroker;
-    defaultBaseUrl;
-    tokenCache = new Map();
-    TOKEN_CACHE_TTL = 30 * 60 * 1000; // 30 minutes
-    circuitBreaker;
-    config;
-    constructor(defaultBaseUrl, authBroker, config) {
-        // Default base URL (used if x-mcp-url is relative)
-        this.defaultBaseUrl = defaultBaseUrl.replace(/\/$/, ""); // Remove trailing slash
-        this.authBroker = authBroker;
-        this.config = (0, config_js_1.loadConfig)();
-        // Merge provided config
-        if (config) {
-            this.config = { ...this.config, ...config };
-        }
-        // Initialize circuit breaker
-        this.circuitBreaker = new errorHandler_js_1.CircuitBreaker(this.config.circuitBreakerThreshold || 5, this.config.circuitBreakerTimeout || 60000);
-        // Create axios instance without baseURL - we'll use full URLs from x-mcp-url
-        this.axiosInstance = axios_1.default.create({
-            timeout: this.config.requestTimeout || 60000,
-            headers: {
-                "Content-Type": "application/json",
-            },
-        });
-        // Add request interceptor for logging
-        this.axiosInstance.interceptors.request.use((config) => {
-            logger_js_1.logger.debug("Proxying request to cloud-llm-hub", {
-                type: "CLOUD_LLM_HUB_PROXY_REQUEST",
-                method: config.method,
-                url: config.url,
-                baseURL: config.baseURL,
-            });
-            return config;
-        }, (error) => {
-            logger_js_1.logger.error("Request interceptor error", {
-                type: "CLOUD_LLM_HUB_PROXY_REQUEST_ERROR",
-                error: error instanceof Error ? error.message : String(error),
-            });
-            return Promise.reject(error);
-        });
-        // Add response interceptor for logging
-        this.axiosInstance.interceptors.response.use((response) => {
-            logger_js_1.logger.debug("Received response from cloud-llm-hub", {
-                type: "CLOUD_LLM_HUB_PROXY_RESPONSE",
-                status: response.status,
-                url: response.config.url,
-            });
-            return response;
-        }, (error) => {
-            logger_js_1.logger.error("Response interceptor error", {
-                type: "CLOUD_LLM_HUB_PROXY_RESPONSE_ERROR",
-                error: error instanceof Error ? error.message : String(error),
-                status: error.response?.status,
-                url: error.config?.url,
-            });
-            return Promise.reject(error);
-        });
-    }
-    /**
-     * Get JWT token for destination from auth-broker with retry and token refresh
-     */
-    async getJwtToken(destination, forceRefresh = false) {
-        // Check cache first (unless force refresh)
-        if (!forceRefresh) {
-            const cached = this.tokenCache.get(destination);
-            if (cached && cached.expiresAt > Date.now()) {
-                logger_js_1.logger.debug("Using cached JWT token", {
-                    type: "JWT_TOKEN_CACHE_HIT",
-                    destination,
-                });
-                return cached.token;
-            }
-        }
-        // Retry logic for token retrieval
-        const retryOptions = {
-            maxRetries: this.config.maxRetries || 3,
-            retryDelay: this.config.retryDelay || 1000,
-            retryableStatusCodes: [500, 502, 503, 504],
-        };
-        try {
-            const token = await (0, errorHandler_js_1.retryWithBackoff)(async () => {
-                // Clear cache if force refresh
-                if (forceRefresh) {
-                    this.tokenCache.delete(destination);
-                }
-                // Get token from auth-broker
-                const token = await this.authBroker.getToken(destination);
-                // Cache token (assume it's valid for 30 minutes)
-                this.tokenCache.set(destination, {
-                    token,
-                    expiresAt: Date.now() + this.TOKEN_CACHE_TTL,
-                });
-                logger_js_1.logger.debug("Retrieved JWT token from auth-broker", {
-                    type: "JWT_TOKEN_RETRIEVED",
-                    destination,
-                    forceRefresh,
-                });
-                return token;
-            }, retryOptions);
-            return token;
-        }
-        catch (error) {
-            logger_js_1.logger.error("Failed to get JWT token from auth-broker after retries", {
-                type: "JWT_TOKEN_ERROR",
-                destination,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw error;
-        }
-    }
-    /**
-     * Build proxy request with JWT tokens and SAP configuration
-     *
-     * Uses service keys:
-     * 1. x-btp-destination - for BTP Cloud authorization (Authorization: Bearer token) - OPTIONAL
-     * 2. x-mcp-destination - for SAP ABAP connection (SAP headers with token and config) - OPTIONAL
-     *
-     * Can work with only x-mcp-destination (without BTP) for local testing without authentication
-     */
-    async buildProxyRequest(originalRequest, routingDecision, originalHeaders, forceTokenRefresh = false) {
-        // Build headers for target MCP server
-        const proxyHeaders = {
-            "Content-Type": "application/json",
-        };
-        // 1. Get authorization token for BTP Cloud (x-btp-destination or --btp) - OPTIONAL
-        // This token is used for Authorization: Bearer header to connect to cloud MCP server
-        // Only required if btpDestination is present
-        if (routingDecision.btpDestination) {
-            const authToken = await this.getJwtToken(routingDecision.btpDestination, forceTokenRefresh);
-            proxyHeaders["Authorization"] = `Bearer ${authToken}`;
-            logger_js_1.logger.debug("Added BTP Cloud authorization token", {
-                type: "BTP_AUTH_TOKEN_ADDED",
-                destination: routingDecision.btpDestination,
-            });
-        }
-        else {
-            logger_js_1.logger.debug("Skipping BTP Cloud authorization (no btpDestination - local testing mode)", {
-                type: "BTP_AUTH_SKIPPED",
-            });
-        }
-        // 2. Get SAP ABAP configuration from x-mcp-destination (OPTIONAL)
-        // This provides token and configuration for SAP ABAP connection
-        // Only used if x-mcp-destination or --mcp is provided
-        // For local testing (without BTP), token retrieval is optional - URL is still needed
-        if (routingDecision.mcpDestination) {
-            const sapUrl = await this.authBroker.getSapUrl(routingDecision.mcpDestination);
-            // Try to get token, but don't fail if it's not available (for local testing)
-            try {
-                const sapToken = await this.getJwtToken(routingDecision.mcpDestination, forceTokenRefresh);
-                proxyHeaders["x-sap-jwt-token"] = sapToken;
-                logger_js_1.logger.debug("Added SAP ABAP token", {
-                    type: "SAP_TOKEN_ADDED",
-                    destination: routingDecision.mcpDestination,
-                });
-            }
-            catch (error) {
-                logger_js_1.logger.warn("Failed to get SAP ABAP token (continuing without token for local testing)", {
-                    type: "SAP_TOKEN_SKIPPED",
-                    destination: routingDecision.mcpDestination,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-                // Continue without token - this is OK for local testing
-            }
-            // Add SAP ABAP headers
-            if (sapUrl) {
-                proxyHeaders["x-sap-url"] = sapUrl;
-            }
-            proxyHeaders["x-sap-destination"] = routingDecision.mcpDestination;
-            logger_js_1.logger.debug("Added SAP ABAP configuration", {
-                type: "SAP_CONFIG_ADDED",
-                destination: routingDecision.mcpDestination,
-                sapUrl: sapUrl || "not found",
-                hasToken: !!proxyHeaders["x-sap-jwt-token"],
-            });
-        }
-        // Preserve other original SAP headers if provided
-        const sapHeaders = [
-            "x-sap-client",
-            "x-sap-auth-type",
-            "x-sap-login",
-            "x-sap-password",
-        ];
-        for (const headerName of sapHeaders) {
-            const value = originalHeaders[headerName];
-            if (value) {
-                proxyHeaders[headerName] = Array.isArray(value) ? value[0] : value;
-            }
-        }
-        // Get MCP server URL from:
-        // 1. x-mcp-url header (if provided) - direct URL
-        // 2. BTP destination service key (if btpDestination is present)
-        // 3. MCP destination service key (if only mcpDestination is present)
-        let baseUrl;
-        if (routingDecision.mcpUrl) {
-            // Use direct URL from x-mcp-url header
-            baseUrl = routingDecision.mcpUrl;
-            logger_js_1.logger.debug("Using MCP URL from x-mcp-url header", {
-                type: "MCP_URL_FROM_HEADER",
-                url: baseUrl,
-            });
-        }
-        else if (routingDecision.btpDestination) {
-            // Get URL from BTP destination service key
-            baseUrl = await this.authBroker.getSapUrl(routingDecision.btpDestination);
-            if (!baseUrl) {
-                throw new Error(`Failed to get MCP server URL from BTP destination "${routingDecision.btpDestination}". Check service key file.`);
-            }
-            logger_js_1.logger.debug("Using MCP URL from BTP destination service key", {
-                type: "MCP_URL_FROM_BTP",
-                destination: routingDecision.btpDestination,
-                url: baseUrl,
-            });
-        }
-        else if (routingDecision.mcpDestination) {
-            // Get URL from MCP destination service key (for local testing without BTP)
-            baseUrl = await this.authBroker.getSapUrl(routingDecision.mcpDestination);
-            if (!baseUrl) {
-                throw new Error(`Failed to get MCP server URL from MCP destination "${routingDecision.mcpDestination}". Check service key file.`);
-            }
-            logger_js_1.logger.debug("Using MCP URL from MCP destination service key (local testing mode)", {
-                type: "MCP_URL_FROM_MCP",
-                destination: routingDecision.mcpDestination,
-                url: baseUrl,
-            });
-        }
-        else {
-            throw new Error("Cannot determine MCP server URL: neither x-mcp-url header, btpDestination, nor mcpDestination is provided");
-        }
-        // Construct full MCP endpoint URL
-        // If baseUrl already contains the path, use it as-is
-        // Otherwise, append default endpoint /mcp/stream/http
-        let fullUrl;
-        if (baseUrl.includes("/mcp/") || baseUrl.endsWith("/mcp")) {
-            // URL already contains MCP path
-            fullUrl = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-        }
-        else {
-            // Append default endpoint
-            const mcpPath = "/mcp/stream/http";
-            fullUrl = baseUrl.endsWith("/")
-                ? `${baseUrl.slice(0, -1)}${mcpPath}`
-                : `${baseUrl}${mcpPath}`;
-        }
-        logger_js_1.logger.debug("Built proxy request", {
-            type: "PROXY_REQUEST_BUILT",
-            btpDestination: routingDecision.btpDestination,
-            mcpDestination: routingDecision.mcpDestination,
-            mcpUrl: routingDecision.mcpUrl,
-            baseUrl,
-            fullUrl,
-            hasAuthToken: !!proxyHeaders["Authorization"],
-            hasSapConfig: !!proxyHeaders["x-sap-jwt-token"],
-            sapHeaders: Object.keys(proxyHeaders).filter(h => h.startsWith("x-sap")),
-        });
-        // Return axios config with full URL
-        return {
-            method: "POST",
-            url: fullUrl,
-            headers: proxyHeaders,
-            data: originalRequest,
-        };
-    }
-    /**
-     * Proxy MCP request to cloud-llm-hub with retry, circuit breaker, and error handling
-     */
-    async proxyRequest(originalRequest, routingDecision, originalHeaders) {
-        // Check circuit breaker
-        if (!this.circuitBreaker.canProceed()) {
-            logger_js_1.logger.warn("Circuit breaker is open, rejecting request", {
-                type: "CIRCUIT_BREAKER_REJECTED",
-                btpDestination: routingDecision.btpDestination,
-                mcpDestination: routingDecision.mcpDestination,
-            });
-            return (0, errorHandler_js_1.createErrorResponse)(originalRequest.id || null, -32001, "Service temporarily unavailable (circuit breaker open)", { circuitBreakerState: this.circuitBreaker.getState() });
-        }
-        const retryOptions = {
-            maxRetries: this.config.maxRetries || 3,
-            retryDelay: this.config.retryDelay || 1000,
-            retryableStatusCodes: [500, 502, 503, 504],
-        };
-        try {
-            const response = await (0, errorHandler_js_1.retryWithBackoff)(async () => {
-                // Check for token expiration and refresh if needed
-                let forceTokenRefresh = false;
-                // Build proxy request (will get fresh token if needed)
-                const proxyConfig = await this.buildProxyRequest(originalRequest, routingDecision, originalHeaders, forceTokenRefresh);
-                // Send request to cloud-llm-hub
-                const response = await this.axiosInstance.request(proxyConfig);
-                // Record success in circuit breaker
-                this.circuitBreaker.recordSuccess();
-                logger_js_1.logger.debug("Proxied request completed", {
-                    type: "PROXY_REQUEST_COMPLETED",
-                    status: response.status,
-                    hasResult: !!response.data?.result,
-                    hasError: !!response.data?.error,
-                });
-                return response;
-            }, retryOptions);
-            return response.data;
-        }
-        catch (error) {
-            // Record failure in circuit breaker
-            this.circuitBreaker.recordFailure();
-            // Handle token expiration
-            if ((0, errorHandler_js_1.isTokenExpirationError)(error)) {
-                logger_js_1.logger.warn("Token expiration detected, will retry with fresh token", {
-                    type: "TOKEN_EXPIRATION_DETECTED",
-                    btpDestination: routingDecision.btpDestination,
-                    mcpDestination: routingDecision.mcpDestination,
-                });
-                // Retry once with fresh token
-                try {
-                    const proxyConfig = await this.buildProxyRequest(originalRequest, routingDecision, originalHeaders, true // Force token refresh
-                    );
-                    const response = await this.axiosInstance.request(proxyConfig);
-                    this.circuitBreaker.recordSuccess();
-                    return response.data;
-                }
-                catch (retryError) {
-                    logger_js_1.logger.error("Failed to retry with fresh token", {
-                        type: "TOKEN_REFRESH_RETRY_FAILED",
-                        error: retryError instanceof Error ? retryError.message : String(retryError),
-                    });
-                }
-            }
-            logger_js_1.logger.error("Failed to proxy request to cloud-llm-hub", {
-                type: "PROXY_REQUEST_ERROR",
-                error: error instanceof Error ? error.message : String(error),
-                status: axios_1.default.isAxiosError(error) ? error.response?.status : undefined,
-                circuitBreakerState: this.circuitBreaker.getState(),
-            });
-            // Return error response in MCP format
-            return (0, errorHandler_js_1.createErrorResponse)(originalRequest.id || null, axios_1.default.isAxiosError(error) && error.response?.status
-                ? error.response.status
-                : -32000, error instanceof Error ? error.message : "Unknown error", {
-                circuitBreakerState: this.circuitBreaker.getState(),
-                originalError: axios_1.default.isAxiosError(error) && error.response?.data
-                    ? error.response.data
-                    : undefined,
-            });
-        }
-    }
-}
-exports.CloudLlmHubProxy = CloudLlmHubProxy;
-/**
- * Create Cloud LLM Hub Proxy instance
- */
-async function createCloudLlmHubProxy(cloudLlmHubUrl, config) {
-    const unsafe = config?.unsafe ?? false;
-    const { serviceKeyStore, sessionStore } = await (0, stores_js_1.getPlatformStores)(unsafe);
-    const authBroker = new auth_broker_1.AuthBroker({
-        serviceKeyStore,
-        sessionStore,
-    }, "system");
-    return new CloudLlmHubProxy(cloudLlmHubUrl, authBroker, config);
-}
+// DELETED

package/dist/router/headerAnalyzer.d.ts

@@ -1,8 +1,7 @@
 /**
  * Header Analyzer - Analyzes HTTP headers to determine routing strategy
  */
-import { IncomingHttpHeaders } from "http";
-import { HeaderValidationResult } from "@mcp-abap-adt/header-validator";
+import type { IncomingHttpHeaders } from 'node:http';
 export declare enum RoutingStrategy {
     /** Proxy request with JWT authentication */
     PROXY = "proxy",
@@ -12,34 +11,31 @@ export declare enum RoutingStrategy {
 export interface RoutingDecision {
     strategy: RoutingStrategy;
     btpDestination?: string;
-    mcpDestination?: string;
-    mcpUrl?: string;
+    targetUrl?: string;
     reason: string;
-    validationResult?: HeaderValidationResult;
 }
 /**
  * Analyze headers and extract routing information
- * Proxy needs either:
+ *
+ * Proxy validates only one header for authentication:
  * - x-btp-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
- * - x-mcp-destination (or --mcp): destination for SAP ABAP connection (SAP headers) - can be used without BTP for local testing
  *
- * Also supports:
- * - x-mcp-url (or --mcp-url): direct MCP server URL (used when no BTP destination is provided, for local testing)
+
  *
- * Command-line overrides:
+ * Command-line overrides (take precedence over headers):
  * - --btp=<destination>: overrides x-btp-destination header
- * - --mcp=<destination>: overrides x-mcp-destination header
- * - --mcp-url=<url>: overrides x-mcp-url header (for local testing without BTP)
  *
- * MCP server URL is obtained from:
- * - x-mcp-url header or --mcp-url parameter (if provided) - takes precedence
- * - service key for x-btp-destination (via auth-broker) if BTP destination is present
- * - service key for x-mcp-destination (via auth-broker) if only MCP destination is present
+ * Other headers are passed directly to MCP server without validation.
+ *
+ * MPC server URL is obtained from:
+ * - service key for x-btp-destination (via auth-broker)
+ *
+ *
+ * Note: Proxy does NOT use .env files for connection configuration. Only destinations via auth-broker (service key files) are used.
  */
 export declare function analyzeHeaders(headers: IncomingHttpHeaders, configOverrides?: {
     btpDestination?: string;
-    mcpDestination?: string;
-    mcpUrl?: string;
+    targetUrl?: string;
 }): RoutingDecision;
 /**
  * Check if headers indicate a request that should be proxied

package/dist/router/headerAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headerAnalyzer.d.ts","sourceRoot":"","sources":["../../src/router/headerAnalyzer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAA2C,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGjH,oBAAY,eAAe;IACzB,4CAA4C;IAC5C,KAAK,UAAU;IACf,6CAA6C;IAC7C,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,mBAAmB,EAC5B,eAAe,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF,eAAe,CAyFjB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAGjE"}
+{"version":3,"file":"headerAnalyzer.d.ts","sourceRoot":"","sources":["../../src/router/headerAnalyzer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAIrD,oBAAY,eAAe;IACzB,4CAA4C;IAC5C,KAAK,UAAU;IAEf,6CAA6C;IAC7C,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,mBAAmB,EAC5B,eAAe,CAAC,EAAE;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,eAAe,CA6DjB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAGjE"}

package/dist/router/headerAnalyzer.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RoutingStrategy = void 0;
 exports.analyzeHeaders = analyzeHeaders;
 exports.shouldProxy = shouldProxy;
-const header_validator_1 = require("@mcp-abap-adt/header-validator");
+const interfaces_1 = require("@mcp-abap-adt/interfaces");
 const logger_js_1 = require("../lib/logger.js");
 var RoutingStrategy;
 (function (RoutingStrategy) {
@@ -17,102 +17,75 @@ var RoutingStrategy;
 })(RoutingStrategy || (exports.RoutingStrategy = RoutingStrategy = {}));
 /**
  * Analyze headers and extract routing information
- * Proxy needs either:
+ *
+ * Proxy validates only one header for authentication:
  * - x-btp-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
- * - x-mcp-destination (or --mcp): destination for SAP ABAP connection (SAP headers) - can be used without BTP for local testing
  *
- * Also supports:
- * - x-mcp-url (or --mcp-url): direct MCP server URL (used when no BTP destination is provided, for local testing)
+
  *
- * Command-line overrides:
+ * Command-line overrides (take precedence over headers):
  * - --btp=<destination>: overrides x-btp-destination header
- * - --mcp=<destination>: overrides x-mcp-destination header
- * - --mcp-url=<url>: overrides x-mcp-url header (for local testing without BTP)
  *
- * MCP server URL is obtained from:
- * - x-mcp-url header or --mcp-url parameter (if provided) - takes precedence
- * - service key for x-btp-destination (via auth-broker) if BTP destination is present
- * - service key for x-mcp-destination (via auth-broker) if only MCP destination is present
+ * Other headers are passed directly to MCP server without validation.
+ *
+ * MPC server URL is obtained from:
+ * - service key for x-btp-destination (via auth-broker)
+ *
+ *
+ * Note: Proxy does NOT use .env files for connection configuration. Only destinations via auth-broker (service key files) are used.
  */
 function analyzeHeaders(headers, configOverrides) {
-    // Validate headers using header-validator
-    const validationResult = (0, header_validator_1.validateAuthHeaders)(headers);
-    const validatedConfig = validationResult.config;
-    // Helper function to extract string value from header (handles arrays)
-    const getHeaderValue = (headerValue) => {
+    // Helper function to extract string value from header (handles arrays and case-insensitive lookup)
+    const getHeaderValue = (headerName) => {
+        let headerValue = headers[headerName.toLowerCase()];
+        if (!headerValue) {
+            headerValue = headers[headerName];
+        }
         if (!headerValue)
             return undefined;
         if (Array.isArray(headerValue)) {
             return headerValue[0]?.trim();
         }
-        return typeof headerValue === "string" ? headerValue.trim() : undefined;
+        return typeof headerValue === 'string' ? headerValue.trim() : undefined;
     };
     // Extract authorization destination for BTP Cloud (x-btp-destination)
     // Command-line parameter --btp takes precedence over header
-    const btpDestinationHeader = getHeaderValue(headers["x-btp-destination"]);
+    const btpDestinationHeader = getHeaderValue(interfaces_1.HEADER_BTP_DESTINATION);
     const extractedBtpDestination = configOverrides?.btpDestination
         ? configOverrides.btpDestination
         : btpDestinationHeader;
-    // Extract destination for SAP ABAP connection (x-mcp-destination)
-    // Command-line parameter --mcp takes precedence over header
-    const mcpDestinationHeader = getHeaderValue(headers["x-mcp-destination"]);
-    const extractedMcpDestination = configOverrides?.mcpDestination
-        ? configOverrides.mcpDestination
-        : mcpDestinationHeader;
-    // Extract direct MCP server URL (x-mcp-url)
+    // Extract direct MCP server URL (x-mcp-url) - REMOVED
     // Command-line parameter --mcp-url takes precedence over header
-    const mcpUrlHeader = getHeaderValue(headers["x-mcp-url"]);
-    const extractedMcpUrl = configOverrides?.mcpUrl
-        ? configOverrides.mcpUrl
-        : mcpUrlHeader;
-    // Allow proxying if either:
-    // 1. BTP destination is present, OR
-    // 2. MCP destination is present, OR
-    // 3. MCP URL is provided (for local testing without BTP)
-    // This enables local testing without BTP authentication
-    if (!extractedBtpDestination && !extractedMcpDestination && !extractedMcpUrl) {
-        logger_js_1.logger.warn("Neither x-btp-destination/x-mcp-destination/x-mcp-url header nor --btp/--mcp/--mcp-url parameter is provided", {
-            headers: Object.keys(headers).filter(k => k.toLowerCase().startsWith("x-")),
-            hasBtpConfigOverride: !!configOverrides?.btpDestination,
-            hasMcpConfigOverride: !!configOverrides?.mcpDestination,
-            hasMcpUrlConfigOverride: !!configOverrides?.mcpUrl,
-        });
+    // const mcpUrlHeader = getHeaderValue(HEADER_MCP_URL);
+    // const extractedMcpUrl = configOverrides?.mcpUrl
+    //   ? configOverrides.mcpUrl
+    //   : mcpUrlHeader;
+    // Extract target URL (x-target-url)
+    // Command-line parameter --target-url takes precedence over header
+    const targetUrlHeader = getHeaderValue('x-target-url');
+    const extractedTargetUrl = configOverrides?.targetUrl
+        ? configOverrides.targetUrl
+        : targetUrlHeader;
+    // Check if proxy headers exist in the actual HTTP request (not in config overrides)
+    const _hasBtpInRequest = !!btpDestinationHeader;
+    // If no proxy headers in the actual request, default to what's available or error out
+    if (!extractedBtpDestination) {
         return {
             strategy: RoutingStrategy.UNKNOWN,
-            reason: "Either x-btp-destination/--btp, x-mcp-destination/--mcp, or x-mcp-url/--mcp-url parameter is required for proxying",
-            validationResult,
+            reason: 'No BTP destination provided (missing x-btp-destination or --btp)',
         };
     }
-    // If only MCP URL is provided without destination, we still need either mcpDestination or btpDestination
-    // unless mcpUrl is a full URL that can be used directly
-    if (!extractedBtpDestination && !extractedMcpDestination && extractedMcpUrl) {
-        // This is OK - we can use mcpUrl directly for local testing
-        logger_js_1.logger.debug("Using MCP URL directly for local testing (no destination required)", {
-            type: "MCP_URL_DIRECT",
-            mcpUrl: extractedMcpUrl,
-        });
-    }
     // If x-btp-destination is present, we can proxy with BTP authentication (URL will be obtained from service key)
-    // If only x-mcp-destination is present, we can proxy without BTP authentication (for local testing)
     // If x-mcp-url is provided, we can use it directly (for local testing)
-    logger_js_1.logger.debug("Routing decision: PROXY", {
+    logger_js_1.logger?.debug('Routing decision: PROXY', {
         btpDestination: extractedBtpDestination,
-        mcpDestination: extractedMcpDestination,
-        mcpUrl: extractedMcpUrl || "not provided",
-        priority: validatedConfig?.priority,
     });
-    const reason = extractedBtpDestination
-        ? `Proxying to MCP server from BTP destination "${extractedBtpDestination}"${extractedMcpDestination ? ` with MCP destination "${extractedMcpDestination}"` : ''}`
-        : extractedMcpUrl
-            ? `Proxying to MCP server at "${extractedMcpUrl}" (no BTP authentication - local testing mode)${extractedMcpDestination ? ` with MCP destination "${extractedMcpDestination}"` : ''}`
-            : `Proxying to MCP server with MCP destination "${extractedMcpDestination}" (no BTP authentication - local testing mode)`;
+    const reason = `Proxying to MCP server from BTP destination "${extractedBtpDestination}"`;
     return {
         strategy: RoutingStrategy.PROXY,
-        btpDestination: extractedBtpDestination, // Optional - only used if provided
-        mcpDestination: extractedMcpDestination, // Optional - only used if provided
-        mcpUrl: extractedMcpUrl, // Optional - direct URL if provided (takes precedence)
+        btpDestination: extractedBtpDestination,
+        targetUrl: extractedTargetUrl,
         reason,
-        validationResult,
     };
 }
 /**