@mcp-abap-adt/proxy 0.1.9 → 1.0.0

package/dist/lib/config.d.ts

@@ -27,6 +27,24 @@ export interface ProxyConfig {
  * - If --config is NOT provided, load ONLY from command line parameters and environment variables
  */
 export declare function loadConfig(configPath?: string): ProxyConfig;
+/**
+ * Transport-related fields from config file (not part of ProxyConfig but needed by transportConfig)
+ */
+export interface FileTransportFields {
+    transport?: string;
+    httpPort?: number;
+    httpHost?: string;
+    ssePort?: number;
+    sseHost?: string;
+}
+/**
+ * Extract transport-related fields from a raw config object
+ */
+export declare function extractTransportFields(raw: Record<string, unknown>): FileTransportFields;
+/**
+ * Load raw config from file for transport field extraction
+ */
+export declare function loadRawConfigFile(filePath: string): Record<string, unknown> | null;
 /**
  * Get config file path from command line (--config or -c)
  */

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAG/B,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAqC3D;AAuHD;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAUD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG;IACnD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAoDA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAG/B,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAqC3D;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,mBAAmB,CAQrB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAYhC;AA0GD;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAUD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG;IACnD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAoDA"}

package/dist/lib/config.js

@@ -37,6 +37,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadConfig = loadConfig;
+exports.extractTransportFields = extractTransportFields;
+exports.loadRawConfigFile = loadRawConfigFile;
 exports.getConfigPath = getConfigPath;
 exports.validateConfig = validateConfig;
 const fs = __importStar(require("node:fs"));
@@ -80,6 +82,18 @@ function loadConfig(configPath) {
     // No --config provided: load ONLY from command line parameters and environment variables
     return loadFromEnv();
 }
+/**
+ * Extract transport-related fields from a raw config object
+ */
+function extractTransportFields(raw) {
+    return {
+        transport: typeof raw.transport === 'string' ? raw.transport : undefined,
+        httpPort: typeof raw.httpPort === 'number' ? raw.httpPort : undefined,
+        httpHost: typeof raw.httpHost === 'string' ? raw.httpHost : undefined,
+        ssePort: typeof raw.ssePort === 'number' ? raw.ssePort : undefined,
+        sseHost: typeof raw.sseHost === 'string' ? raw.sseHost : undefined,
+    };
+}
 /**
  * Load configuration from file (supports JSON and YAML)
  */
@@ -93,6 +107,24 @@ function loadConfigFile(filePath) {
         return JSON.parse(configContent);
     }
 }
+/**
+ * Load raw config from file for transport field extraction
+ */
+function loadRawConfigFile(filePath) {
+    try {
+        if (!fs.existsSync(filePath))
+            return null;
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const ext = path.extname(filePath).toLowerCase();
+        if (ext === '.yaml' || ext === '.yml') {
+            return yaml.load(content) || {};
+        }
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Apply default values to partial config (used when loading from file)
  */
@@ -104,6 +136,7 @@ function applyDefaults(fileConfig) {
         sseHost: fileConfig.sseHost || '0.0.0.0',
         logLevel: fileConfig.logLevel || 'info',
         btpDestination: fileConfig.btpDestination,
+        targetUrl: fileConfig.targetUrl,
         unsafe: fileConfig.unsafe ?? false,
         maxRetries: fileConfig.maxRetries ?? 3,
         retryDelay: fileConfig.retryDelay ?? 1000,
@@ -184,7 +217,7 @@ function validateConfig(config) {
     // Check if BTP destination is provided
     const hasDestination = config.btpDestination;
     if (!hasDestination) {
-        warnings.push('No BTP destination provided (--btp). Proxy will not work unless requests include x-btp-destination header.');
+        warnings.push('No BTP destination provided (--btp). Proxy will not work unless requests include x-sap-destination header.');
     }
     if (config.httpPort < 1 || config.httpPort > 65535) {
         errors.push('MCP_HTTP_PORT must be between 1 and 65535');

package/dist/lib/stores.d.ts

@@ -4,6 +4,20 @@
  * depending on the unsafe configuration parameter
  */
 import type { IServiceKeyStore, ISessionStore } from '@mcp-abap-adt/auth-broker';
+/**
+ * Get platform-specific default paths for service keys and sessions
+ *
+ * Priority (matching mcp-abap-adt logic):
+ * 1. AUTH_BROKER_PATH environment variable
+ * 2. Platform-specific standard paths (only if no env paths were found):
+ *    - Unix: ~/.config/mcp-abap-adt/{subfolder}
+ *    - Windows: %USERPROFILE%\Documents\mcp-abap-adt\{subfolder}
+ * 3. Current working directory (process.cwd())
+ *
+ * @param subfolder Subfolder name ('service-keys' or 'sessions')
+ * @returns Array of resolved absolute paths
+ */
+export declare function getPlatformPaths(subfolder?: 'service-keys' | 'sessions'): string[];
 /**
  * Get platform-specific stores
  * Returns XSUAA stores for BTP authentication:

package/dist/lib/stores.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stores.d.ts","sourceRoot":"","sources":["../../src/lib/stores.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAsFnC;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,GAAE,OAAe,GAAG,OAAO,CAAC;IACxE,eAAe,EAAE,gBAAgB,CAAC;IAClC,YAAY,EAAE,aAAa,CAAC;CAC7B,CAAC,CAqBD"}
+{"version":3,"file":"stores.d.ts","sourceRoot":"","sources":["../../src/lib/stores.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAOnC;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,CAAC,EAAE,cAAc,GAAG,UAAU,GACtC,MAAM,EAAE,CAgEV;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,GAAE,OAAe,GAAG,OAAO,CAAC;IACxE,eAAe,EAAE,gBAAgB,CAAC;IAClC,YAAY,EAAE,aAAa,CAAC;CAC7B,CAAC,CAqBD"}

package/dist/lib/stores.js

@@ -38,6 +38,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPlatformPaths = getPlatformPaths;
 exports.getPlatformStores = getPlatformStores;
 const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));

package/dist/lib/transportConfig.d.ts

@@ -12,7 +12,20 @@ export interface TransportConfig {
     enableDnsRebindingProtection?: boolean;
 }
 /**
- * Parse transport configuration from command line arguments and environment variables
+ * File-based config overrides for transport settings (from YAML/JSON config file)
  */
-export declare function parseTransportConfig(): TransportConfig;
+export interface FileTransportOverrides {
+    transport?: string;
+    httpPort?: number;
+    httpHost?: string;
+    ssePort?: number;
+    sseHost?: string;
+}
+/**
+ * Parse transport configuration from command line arguments, environment variables,
+ * and optional file-based config overrides.
+ *
+ * Priority: CLI args > file config > env vars > auto-detect > defaults
+ */
+export declare function parseTransportConfig(fileOverrides?: FileTransportOverrides): TransportConfig;
 //# sourceMappingURL=transportConfig.d.ts.map

package/dist/lib/transportConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transportConfig.d.ts","sourceRoot":"","sources":["../../src/lib/transportConfig.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,iBAAiB,GAAG,KAAK,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,eAAe,CAkItD"}
+{"version":3,"file":"transportConfig.d.ts","sourceRoot":"","sources":["../../src/lib/transportConfig.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,iBAAiB,GAAG,KAAK,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAaD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,CAAC,EAAE,sBAAsB,GACrC,eAAe,CAwHjB"}

package/dist/lib/transportConfig.js

@@ -5,33 +5,32 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseTransportConfig = parseTransportConfig;
 /**
- * Parse transport configuration from command line arguments and environment variables
+ * Normalize transport value to TransportType
  */
-function parseTransportConfig() {
+function normalizeTransport(value) {
+    const v = value.toLowerCase();
+    if (v === 'stdio' || v === 'streamable-http' || v === 'http' || v === 'sse') {
+        return v === 'http' ? 'streamable-http' : v;
+    }
+    return null;
+}
+/**
+ * Parse transport configuration from command line arguments, environment variables,
+ * and optional file-based config overrides.
+ *
+ * Priority: CLI args > file config > env vars > auto-detect > defaults
+ */
+function parseTransportConfig(fileOverrides) {
     const args = process.argv;
-    // Check for explicit transport type
+    // Check for explicit transport type from CLI
     let transportType = null;
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
         if (arg.startsWith('--transport=')) {
-            const value = arg.split('=')[1].toLowerCase();
-            if (value === 'stdio' ||
-                value === 'streamable-http' ||
-                value === 'http' ||
-                value === 'sse') {
-                transportType =
-                    value === 'http' ? 'streamable-http' : value;
-            }
+            transportType = normalizeTransport(arg.split('=')[1]);
         }
         if (arg === '--transport' && i + 1 < args.length) {
-            const value = args[i + 1].toLowerCase();
-            if (value === 'stdio' ||
-                value === 'streamable-http' ||
-                value === 'http' ||
-                value === 'sse') {
-                transportType =
-                    value === 'http' ? 'streamable-http' : value;
-            }
+            transportType = normalizeTransport(args[i + 1]);
         }
         if (arg === '--http')
             transportType = 'streamable-http';
@@ -40,18 +39,13 @@ function parseTransportConfig() {
         if (arg === '--sse')
             transportType = 'sse';
     }
+    // Check file config overrides
+    if (!transportType && fileOverrides?.transport) {
+        transportType = normalizeTransport(fileOverrides.transport);
+    }
     // Check environment variable
     if (!transportType && process.env.MCP_TRANSPORT) {
-        const envTransport = process.env.MCP_TRANSPORT.toLowerCase();
-        if (envTransport === 'stdio' ||
-            envTransport === 'streamable-http' ||
-            envTransport === 'http' ||
-            envTransport === 'sse') {
-            transportType =
-                envTransport === 'http'
-                    ? 'streamable-http'
-                    : envTransport;
-        }
+        transportType = normalizeTransport(process.env.MCP_TRANSPORT);
     }
     // Auto-detect stdio mode: if stdin is not a TTY, we're likely in stdio mode
     if (!transportType && !process.stdin.isTTY) {
@@ -63,8 +57,14 @@ function parseTransportConfig() {
     }
     // Parse SSE config
     if (transportType === 'sse') {
-        const port = parseInt(getArgValue('--sse-port') || process.env.MCP_SSE_PORT || '3002', 10);
-        const host = getArgValue('--sse-host') || process.env.MCP_SSE_HOST || '0.0.0.0';
+        const port = parseInt(getArgValue('--sse-port') ||
+            (fileOverrides?.ssePort != null ? String(fileOverrides.ssePort) : '') ||
+            process.env.MCP_SSE_PORT ||
+            '3002', 10);
+        const host = getArgValue('--sse-host') ||
+            fileOverrides?.sseHost ||
+            process.env.MCP_SSE_HOST ||
+            '0.0.0.0';
         return {
             type: 'sse',
             host,
@@ -76,8 +76,16 @@ function parseTransportConfig() {
     }
     // Parse HTTP/streamable-http config
     if (transportType === 'streamable-http') {
-        const port = parseInt(getArgValue('--http-port') || process.env.MCP_HTTP_PORT || '3001', 10);
-        const host = getArgValue('--http-host') || process.env.MCP_HTTP_HOST || '0.0.0.0';
+        const port = parseInt(getArgValue('--http-port') ||
+            (fileOverrides?.httpPort != null
+                ? String(fileOverrides.httpPort)
+                : '') ||
+            process.env.MCP_HTTP_PORT ||
+            '3001', 10);
+        const host = getArgValue('--http-host') ||
+            fileOverrides?.httpHost ||
+            process.env.MCP_HTTP_HOST ||
+            '0.0.0.0';
         return {
             type: 'streamable-http',
             host,

package/dist/proxy/btpProxy.d.ts

@@ -1,7 +1,7 @@
 /**
  * BTP Proxy - Proxies requests to MCP servers with JWT authentication
  *
- * For requests with x-btp-destination, proxies to target MCP server
+ * For requests with x-sap-destination, proxies to target MCP server
  * with JWT token from auth-broker (XSUAA/BTP)
  */
 import { AuthBroker } from '@mcp-abap-adt/auth-broker';
@@ -63,7 +63,12 @@ export declare class BtpProxy {
      * @param destination Destination name
      * @param forceRefresh Force token refresh
      */
-    private getJwtToken;
+    getJwtToken(destination: string, forceRefresh?: boolean): Promise<string>;
+    /**
+     * Get the target service URL for a destination.
+     * Priority: config.targetUrl > service key's serviceUrl
+     */
+    getTargetUrl(destination: string): Promise<string>;
     /**
      * Helper function to extract string value from header (handles arrays)
      */
@@ -74,7 +79,7 @@ export declare class BtpProxy {
      * Process flow:
      *
      * 1. BTP Authentication (XSUAA):
-     *    1.1 If x-btp-destination header exists:
+     *    1.1 If x-sap-destination header exists:
      *        - Check map for broker with key = destination, get or create, save to map
      *        - Get token from xsuaa broker
      *        - Add/replace Authorization: Bearer <token> header

package/dist/proxy/btpProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"btpProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/btpProxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,2BAA2B,CAAC;AAYrE,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AA4CnE;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAU3C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAGD,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,oBAAoB,CAAa;IACzC,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,UAAU,CACN;IACZ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAU;gBAEZ,oBAAoB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAqF3E;;;OAGG;IACU,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3D;;;;OAIG;YACW,wBAAwB;IAqFtC;;OAEG;YACW,uBAAuB;IAyFrC;;;;OAIG;YACW,WAAW;IAwHzB;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;;OAgBG;YACW,iBAAiB;IAmT/B;;OAEG;IACG,YAAY,CAChB,eAAe,EAAE,YAAY,EAC7B,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAC7D,OAAO,CAAC,aAAa,CAAC;IA8JzB;;OAEG;WACiB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;CAyB7E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAEnB"}
+{"version":3,"file":"btpProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/btpProxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,2BAA2B,CAAC;AAYrE,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AA4CnE;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAU3C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAGD,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,oBAAoB,CAAa;IACzC,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,UAAU,CACN;IACZ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAU;gBAEZ,oBAAoB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAqF3E;;;OAGG;IACU,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3D;;;;OAIG;YACW,wBAAwB;IAqFtC;;OAEG;YACW,uBAAuB;IAyFrC;;;;OAIG;IACG,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,OAAe,GAC5B,OAAO,CAAC,MAAM,CAAC;IAqHlB;;;OAGG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAexD;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;;OAgBG;YACW,iBAAiB;IAmT/B;;OAEG;IACG,YAAY,CAChB,eAAe,EAAE,YAAY,EAC7B,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAC7D,OAAO,CAAC,aAAa,CAAC;IA8JzB;;OAEG;WACiB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;CAyB7E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAEnB"}

package/dist/proxy/btpProxy.js

@@ -2,7 +2,7 @@
 /**
  * BTP Proxy - Proxies requests to MCP servers with JWT authentication
  *
- * For requests with x-btp-destination, proxies to target MCP server
+ * For requests with x-sap-destination, proxies to target MCP server
  * with JWT token from auth-broker (XSUAA/BTP)
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
@@ -404,6 +404,22 @@ class BtpProxy {
             throw new Error(errorMessage);
         }
     }
+    /**
+     * Get the target service URL for a destination.
+     * Priority: config.targetUrl > service key's serviceUrl
+     */
+    async getTargetUrl(destination) {
+        if (this.config.targetUrl) {
+            return this.config.targetUrl;
+        }
+        const broker = await this.getOrCreateBtpAuthBroker(destination);
+        const connConfig = await broker.getConnectionConfig(destination);
+        if (connConfig?.serviceUrl) {
+            return connConfig.serviceUrl;
+        }
+        throw new Error(`No target URL found for destination "${destination}". ` +
+            `Set targetUrl in config or ensure service key contains abap.url.`);
+    }
     /**
      * Helper function to extract string value from header (handles arrays)
      */
@@ -421,7 +437,7 @@ class BtpProxy {
      * Process flow:
      *
      * 1. BTP Authentication (XSUAA):
-     *    1.1 If x-btp-destination header exists:
+     *    1.1 If x-sap-destination header exists:
      *        - Check map for broker with key = destination, get or create, save to map
      *        - Get token from xsuaa broker
      *        - Add/replace Authorization: Bearer <token> header
@@ -448,21 +464,21 @@ class BtpProxy {
         // ============================================
         // BTP Authentication (XSUAA)
         // ============================================
-        const btpDestinationHeader = this.getHeaderValue(originalHeaders[interfaces_1.HEADER_BTP_DESTINATION]);
+        const btpDestinationHeader = this.getHeaderValue(originalHeaders[interfaces_1.HEADER_SAP_DESTINATION]);
         const btpDestinationFromParam = routingDecision.btpDestination && !btpDestinationHeader
             ? routingDecision.btpDestination
             : undefined;
         let btpDestination;
         if (btpDestinationHeader) {
             btpDestination = btpDestinationHeader;
-            logger_js_1.logger?.debug('Using x-btp-destination from header', {
+            logger_js_1.logger?.debug('Using x-sap-destination from header', {
                 type: 'BTP_DESTINATION_FROM_HEADER',
                 destination: btpDestination,
             });
         }
         else if (btpDestinationFromParam) {
             btpDestination = btpDestinationFromParam;
-            logger_js_1.logger?.debug('Using x-btp-destination from parameter', {
+            logger_js_1.logger?.debug('Using x-sap-destination from parameter', {
                 type: 'BTP_DESTINATION_FROM_PARAM',
                 destination: btpDestination,
             });

package/dist/proxy/reverseProxy.d.ts

@@ -0,0 +1,7 @@
+import * as http from 'node:http';
+/**
+ * Forward an HTTP request to a target URL with JWT injection.
+ * Streams both request and response using pipe().
+ */
+export declare function forwardRequest(clientReq: http.IncomingMessage, clientRes: http.ServerResponse, targetBaseUrl: string, jwtToken: string): Promise<void>;
+//# sourceMappingURL=reverseProxy.d.ts.map

package/dist/proxy/reverseProxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reverseProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/reverseProxy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAoBlC;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,IAAI,CAAC,eAAe,EAC/B,SAAS,EAAE,IAAI,CAAC,cAAc,EAC9B,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CA+Ef"}

package/dist/proxy/reverseProxy.js

@@ -0,0 +1,130 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.forwardRequest = forwardRequest;
+// src/proxy/reverseProxy.ts
+const http = __importStar(require("node:http"));
+const https = __importStar(require("node:https"));
+const node_url_1 = require("node:url");
+const logger_js_1 = require("../lib/logger.js");
+/**
+ * Hop-by-hop headers that should not be forwarded
+ */
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+    'host',
+]);
+/**
+ * Forward an HTTP request to a target URL with JWT injection.
+ * Streams both request and response using pipe().
+ */
+async function forwardRequest(clientReq, clientRes, targetBaseUrl, jwtToken) {
+    const targetUrl = new node_url_1.URL(clientReq.url || '/', targetBaseUrl);
+    // Build forwarded headers (skip hop-by-hop and replace auth)
+    const forwardedHeaders = {};
+    for (const [key, value] of Object.entries(clientReq.headers)) {
+        if (HOP_BY_HOP_HEADERS.has(key.toLowerCase()))
+            continue;
+        if (key.toLowerCase() === 'authorization')
+            continue;
+        if (value !== undefined) {
+            forwardedHeaders[key] = value;
+        }
+    }
+    // Inject JWT
+    if (jwtToken) {
+        forwardedHeaders.authorization = `Bearer ${jwtToken}`;
+    }
+    // Set correct host for target
+    forwardedHeaders.host = targetUrl.host;
+    const isHttps = targetUrl.protocol === 'https:';
+    const transport = isHttps ? https : http;
+    const options = {
+        hostname: targetUrl.hostname,
+        port: targetUrl.port || (isHttps ? 443 : 80),
+        path: targetUrl.pathname + targetUrl.search,
+        method: clientReq.method || 'GET',
+        headers: forwardedHeaders,
+    };
+    logger_js_1.logger?.info('Forwarding request', {
+        type: 'REVERSE_PROXY_FORWARD',
+        method: options.method,
+        target: targetUrl.toString(),
+    });
+    return new Promise((resolve) => {
+        const proxyReq = transport.request(options, (proxyRes) => {
+            // Forward status code
+            const statusCode = proxyRes.statusCode || 502;
+            // Forward response headers (skip hop-by-hop)
+            const responseHeaders = {};
+            for (const [key, value] of Object.entries(proxyRes.headers)) {
+                if (HOP_BY_HOP_HEADERS.has(key.toLowerCase()))
+                    continue;
+                if (value !== undefined) {
+                    responseHeaders[key] = value;
+                }
+            }
+            logger_js_1.logger?.info('Backend responded', {
+                type: 'REVERSE_PROXY_RESPONSE',
+                statusCode,
+                contentType: proxyRes.headers['content-type'],
+            });
+            clientRes.writeHead(statusCode, responseHeaders);
+            proxyRes.pipe(clientRes);
+            proxyRes.on('end', resolve);
+        });
+        proxyReq.on('error', (err) => {
+            logger_js_1.logger?.error('Reverse proxy connection error', {
+                type: 'REVERSE_PROXY_ERROR',
+                error: err.message,
+                target: targetUrl.toString(),
+            });
+            if (!clientRes.headersSent) {
+                clientRes.writeHead(502, { 'Content-Type': 'application/json' });
+                clientRes.end(JSON.stringify({ error: `Proxy error: ${err.message}` }));
+            }
+            resolve();
+        });
+        // Pipe client request body to backend
+        clientReq.pipe(proxyReq);
+    });
+}

package/dist/router/headerAnalyzer.d.ts

@@ -18,17 +18,17 @@ export interface RoutingDecision {
  * Analyze headers and extract routing information
  *
  * Proxy validates only one header for authentication:
- * - x-btp-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
+ * - x-sap-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
  *
 
  *
  * Command-line overrides (take precedence over headers):
- * - --btp=<destination>: overrides x-btp-destination header
+ * - --btp=<destination>: overrides x-sap-destination header
  *
  * Other headers are passed directly to MCP server without validation.
  *
  * MPC server URL is obtained from:
- * - service key for x-btp-destination (via auth-broker)
+ * - service key for x-sap-destination (via auth-broker)
  *
  *
  * Note: Proxy does NOT use .env files for connection configuration. Only destinations via auth-broker (service key files) are used.

package/dist/router/headerAnalyzer.js

@@ -19,17 +19,17 @@ var RoutingStrategy;
  * Analyze headers and extract routing information
  *
  * Proxy validates only one header for authentication:
- * - x-btp-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
+ * - x-sap-destination (or --btp): destination for BTP Cloud authorization token (Authorization: Bearer) and MCP server URL
  *
 
  *
  * Command-line overrides (take precedence over headers):
- * - --btp=<destination>: overrides x-btp-destination header
+ * - --btp=<destination>: overrides x-sap-destination header
  *
  * Other headers are passed directly to MCP server without validation.
  *
  * MPC server URL is obtained from:
- * - service key for x-btp-destination (via auth-broker)
+ * - service key for x-sap-destination (via auth-broker)
  *
  *
  * Note: Proxy does NOT use .env files for connection configuration. Only destinations via auth-broker (service key files) are used.
@@ -48,9 +48,9 @@ function analyzeHeaders(headers, configOverrides) {
         }
         return typeof headerValue === 'string' ? headerValue.trim() : undefined;
     };
-    // Extract authorization destination for BTP Cloud (x-btp-destination)
+    // Extract authorization destination for BTP Cloud (x-sap-destination)
     // Command-line parameter --btp takes precedence over header
-    const btpDestinationHeader = getHeaderValue(interfaces_1.HEADER_BTP_DESTINATION);
+    const btpDestinationHeader = getHeaderValue(interfaces_1.HEADER_SAP_DESTINATION);
     const extractedBtpDestination = configOverrides?.btpDestination
         ? configOverrides.btpDestination
         : btpDestinationHeader;
@@ -72,10 +72,10 @@ function analyzeHeaders(headers, configOverrides) {
     if (!extractedBtpDestination) {
         return {
             strategy: RoutingStrategy.UNKNOWN,
-            reason: 'No BTP destination provided (missing x-btp-destination or --btp)',
+            reason: 'No BTP destination provided (missing x-sap-destination or --btp)',
         };
     }
-    // If x-btp-destination is present, we can proxy with BTP authentication (URL will be obtained from service key)
+    // If x-sap-destination is present, we can proxy with BTP authentication (URL will be obtained from service key)
     // If x-mcp-url is provided, we can use it directly (for local testing)
     logger_js_1.logger?.debug('Routing decision: PROXY', {
         btpDestination: extractedBtpDestination,

package/dist/router/requestInterceptor.d.ts

@@ -18,6 +18,8 @@ export interface InterceptedRequest {
 export declare function interceptRequest(req: IncomingMessage, body?: unknown, configOverrides?: {
     btpDestination?: string;
     targetUrl?: string;
+}, options?: {
+    skipHeaderValidation?: boolean;
 }): InterceptedRequest;
 /**
  * Sanitize headers for logging (remove sensitive data)

package/dist/router/requestInterceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requestInterceptor.d.ts","sourceRoot":"","sources":["../../src/router/requestInterceptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAajD,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,IAAI,CAAC,EAAE,OAAO,EACd,eAAe,CAAC,EAAE;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,kBAAkB,CAqDpB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB"}
+{"version":3,"file":"requestInterceptor.d.ts","sourceRoot":"","sources":["../../src/router/requestInterceptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAajD,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,IAAI,CAAC,EAAE,OAAO,EACd,eAAe,CAAC,EAAE;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,OAAO,CAAC,EAAE;IACR,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,GACA,kBAAkB,CAuDpB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB"}