@mcp-abap-adt/proxy 1.6.3 → 1.6.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/package.json +4 -4
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [1.6.4] - 2026-07-29
|
|
11
|
+
|
|
12
|
+
### Fixed
|
|
13
|
+
- **The two callback-port leaks that 1.6.3 deferred are now closed**, through
|
|
14
|
+
`@mcp-abap-adt/auth-providers@1.2.0`. 1.6.3 fixed the half that survived stopping the
|
|
15
|
+
proxy — the orphaned server — and recorded these as outstanding: a callback arriving
|
|
16
|
+
without a `code` parameter left the socket bound for the lifetime of the process, and a
|
|
17
|
+
failed token exchange released it about 300 ms after the login promise had already been
|
|
18
|
+
rejected. Both are gone: the port is released when the login ends by any means, and the
|
|
19
|
+
promise settles only once the socket is actually free.
|
|
20
|
+
- **An interactive login can no longer strand a port by being abandoned.** The OIDC and
|
|
21
|
+
SAML flows in the dependency had no timeout at all, so a user who closed the tab left the
|
|
22
|
+
port held until the process exited. Every flow now has one.
|
|
23
|
+
|
|
24
|
+
### Changed
|
|
25
|
+
- Requires `@mcp-abap-adt/auth-broker` `^1.0.8` (was `^1.0.7`) and
|
|
26
|
+
`@mcp-abap-adt/auth-providers` `^1.2.0` (was `^1.1.0`).
|
|
27
|
+
- **`engines.node` is now `>=18.2.0`** (was `>=18.0.0`), matching the floor those packages
|
|
28
|
+
require for `server.closeAllConnections()`.
|
|
29
|
+
|
|
30
|
+
### Notes
|
|
31
|
+
- No change in this package's own code. `src/__tests__/bin/callbackPortLifecycle.test.ts`
|
|
32
|
+
was written in 1.6.3 against behaviour rather than implementation, and passes unchanged
|
|
33
|
+
against the rewritten dependency — including the case that starts a second proxy on the
|
|
34
|
+
same configured auth port while the first is still running.
|
|
35
|
+
- Two proxies whose interactive logins overlap still cannot share one `browserAuthPort`.
|
|
36
|
+
That is inherent: the port is held for the duration of a login.
|
|
37
|
+
|
|
38
|
+
|
|
10
39
|
## [1.6.3] - 2026-07-27
|
|
11
40
|
|
|
12
41
|
### Fixed
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@mcp-abap-adt/proxy",
|
|
3
|
-
"version": "1.6.
|
|
3
|
+
"version": "1.6.4",
|
|
4
4
|
"description": "MCP proxy server for SAP ABAP ADT - proxies local requests to cloud-llm-hub with JWT authentication",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -62,8 +62,8 @@
|
|
|
62
62
|
"typescript": "^6.0.3"
|
|
63
63
|
},
|
|
64
64
|
"dependencies": {
|
|
65
|
-
"@mcp-abap-adt/auth-broker": "^1.0.
|
|
66
|
-
"@mcp-abap-adt/auth-providers": "^1.
|
|
65
|
+
"@mcp-abap-adt/auth-broker": "^1.0.8",
|
|
66
|
+
"@mcp-abap-adt/auth-providers": "^1.2.0",
|
|
67
67
|
"@mcp-abap-adt/auth-stores": "^1.0.4",
|
|
68
68
|
"@mcp-abap-adt/header-validator": "^0.1.8",
|
|
69
69
|
"@mcp-abap-adt/interfaces": "^7.0.0",
|
|
@@ -75,7 +75,7 @@
|
|
|
75
75
|
"zod": "^4.3.6"
|
|
76
76
|
},
|
|
77
77
|
"engines": {
|
|
78
|
-
"node": ">=18.
|
|
78
|
+
"node": ">=18.2.0",
|
|
79
79
|
"npm": ">=9.0.0"
|
|
80
80
|
},
|
|
81
81
|
"files": [
|