@mcp-abap-adt/proxy 2.0.0 → 4.0.0

package/dist/mcp/tools.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHUTDOWN_REMINDER = void 0;
+exports.createProxyTools = createProxyTools;
+// src/mcp/tools.ts
+const zod_1 = require("zod");
+const config_js_1 = require("../lib/config.js");
+const configs_js_1 = require("./configs.js");
+const supervisor_js_1 = require("./supervisor.js");
+/**
+ * The thing the client has to keep being told.
+ *
+ * A running proxy holds a TCP port and a live credential for the destination.
+ * The client here is a language model reading tool descriptions selectively,
+ * so this appears in the description of `proxy_start`, in the text that comes
+ * back with the URL, and in the server's own instructions. Three places for one
+ * sentence is not redundancy — it is the difference between a reminder that is
+ * read when the work starts and one that is read when the work finishes.
+ */
+exports.SHUTDOWN_REMINDER = 'When you are finished with this proxy, call proxy_stop. ' +
+    'A running proxy holds a TCP port and a live credential for its destination ' +
+    'until it is stopped or the session ends.';
+const text = (body) => ({
+    content: [{ type: 'text', text: body }],
+});
+function createProxyTools(supervisor, configDir = (0, configs_js_1.proxyConfigDir)()) {
+    return [
+        {
+            name: 'proxy_configs',
+            title: 'List the proxy configs available',
+            description: 'List the proxy configurations on this machine, by the name ' +
+                'proxy_start takes. Each one already carries its destination, target ' +
+                'URL, default headers and timeouts, so starting a proxy is choosing a ' +
+                'name — not assembling settings. Call this first; the names cannot be ' +
+                'guessed.',
+            inputSchema: {},
+            handler: async () => {
+                const configs = (0, configs_js_1.listProxyConfigs)(configDir);
+                if (configs.length === 0) {
+                    return text(`No proxy configs found in ${configDir}.`);
+                }
+                return text([
+                    `Proxy configs in ${configDir}:`,
+                    ...configs.map((c) => {
+                        const about = (0, configs_js_1.describeConfig)(c);
+                        const where = c.destination
+                            ? ` — destination ${c.destination}`
+                            : '';
+                        return `  ${c.name}${where}${about ? `\n      ${about}` : ''}`;
+                    }),
+                    '',
+                    'Start one with proxy_start { "config": "<name>" }.',
+                ].join('\n'));
+            },
+        },
+        {
+            name: 'proxy_start',
+            title: 'Start an authenticating proxy',
+            description: 'Start a local proxy from one of the configs proxy_configs lists. The ' +
+                'config supplies the destination, target URL, default headers and ' +
+                'timeouts — including any credentials, which stay in the config and ' +
+                'are never passed through here. The port is NOT taken from the config: ' +
+                'a free one is bound instead, so several proxies can run at once, and ' +
+                `the URL that comes back is the one actually bound. ${exports.SHUTDOWN_REMINDER}`,
+            inputSchema: {
+                config: zod_1.z
+                    .string()
+                    .describe('Name of a proxy config, as proxy_configs lists it (for example "nvcr_d24").'),
+                idleTimeoutMs: zod_1.z
+                    .number()
+                    .optional()
+                    .describe(`Stop the proxy after this long with no request. Defaults to ${supervisor_js_1.DEFAULT_IDLE_TIMEOUT_MS} ms; 0 disables it. This is a backstop, not a substitute for proxy_stop.`),
+            },
+            handler: async (args) => {
+                const name = String(args.config);
+                const file = (0, configs_js_1.resolveProxyConfig)(name, configDir);
+                const started = await supervisor.start({
+                    name,
+                    config: (0, config_js_1.loadConfig)(file),
+                    idleTimeoutMs: args.idleTimeoutMs,
+                });
+                return text([
+                    `Proxy running at ${started.url}`,
+                    `  config:      ${started.name}`,
+                    `  instanceId:  ${started.instanceId}`,
+                    `  destination: ${started.destination}`,
+                    '',
+                    exports.SHUTDOWN_REMINDER,
+                ].join('\n'));
+            },
+        },
+        {
+            name: 'proxy_stop',
+            title: 'Stop a proxy this session started',
+            description: 'Stop a proxy started in this session, freeing its port and releasing ' +
+                'its credential. With no instanceId, stops every proxy this session ' +
+                'started. Proxies belonging to other sessions are never touched — ' +
+                'proxy_status shows them, and they are theirs to stop.',
+            inputSchema: {
+                instanceId: zod_1.z
+                    .string()
+                    .optional()
+                    .describe('Which proxy to stop. Omit to stop all of this session’s.'),
+            },
+            handler: async (args) => {
+                const stopped = await supervisor.stop(args.instanceId);
+                if (stopped.length === 0) {
+                    return text(args.instanceId
+                        ? `Nothing stopped: this session does not own a proxy with instanceId ${args.instanceId}. Use proxy_status to see what is running.`
+                        : 'Nothing stopped: this session has no proxies running.');
+                }
+                return text([
+                    `Stopped ${stopped.length} ${stopped.length === 1 ? 'proxy' : 'proxies'}:`,
+                    ...stopped.map((s) => `  ${s.url} — config ${s.name} — port ${s.port} released`),
+                ].join('\n'));
+            },
+        },
+        {
+            name: 'proxy_status',
+            title: 'List running proxies',
+            description: 'List the proxies this session started, and any started by other ' +
+                'sessions on this machine. Records whose process has died are pruned ' +
+                'when this is read, so what it reports is what is actually running.',
+            inputSchema: {},
+            handler: async () => {
+                const mine = supervisor.mine();
+                const others = supervisor.others();
+                if (mine.length === 0 && others.length === 0) {
+                    return text('No proxies are running on this machine.');
+                }
+                const lines = [];
+                if (mine.length > 0) {
+                    lines.push('Started by this session:');
+                    for (const m of mine) {
+                        lines.push(`  ${m.url} — config ${m.name} (destination ${m.destination}) — instanceId ${m.instanceId}`);
+                    }
+                    lines.push('', exports.SHUTDOWN_REMINDER);
+                }
+                else {
+                    lines.push('This session has no proxies running.');
+                }
+                if (others.length > 0) {
+                    lines.push('', 'Started by another session (not yours to stop):');
+                    for (const o of others) {
+                        lines.push(`  ${o.url} — config ${o.config} (destination ${o.destination}) — pid ${o.pid}`);
+                    }
+                }
+                return text(lines.join('\n'));
+            },
+        },
+    ];
+}

package/dist/proxy/btpProxy.d.ts

@@ -6,42 +6,18 @@
  */
 import { AuthBroker } from '@mcp-abap-adt/auth-broker';
 import { type ProxyConfig } from '../lib/config.js';
-import type { RoutingDecision } from '../router/headerAnalyzer.js';
 /**
  * Check if error messages should be written to stderr
  * Only output in verbose mode and not in test environment
  */
 export declare function shouldWriteStderr(): boolean;
-export interface GenericProxyRequest {
-    method: string;
-    url?: string;
-    data?: unknown;
-    id?: string | number | null;
-    [key: string]: unknown;
-}
-export type ProxyRequest = GenericProxyRequest;
-export interface ProxyResponse {
-    jsonrpc: string;
-    id?: string | number | null;
-    result?: unknown;
-    error?: {
-        code: number;
-        message: string;
-        data?: unknown;
-    };
-}
 /**
  * BTP Proxy Client
  */
 export declare class BtpProxy {
-    private axiosInstance;
     private defaultBtpAuthBroker;
     private btpAuthBrokers;
-    private tokenCache;
-    private refreshTimers;
-    private readonly TOKEN_CACHE_TTL;
-    private readonly REFRESH_LEAD_MS;
-    private circuitBreaker;
+    private readonly credentials;
     private config;
     private unsafe;
     constructor(defaultBtpAuthBroker: AuthBroker, config?: Partial<ProxyConfig>);
@@ -61,63 +37,38 @@ export declare class BtpProxy {
      */
     private ensureSessionServiceUrl;
     /**
-     * Get JWT token for BTP destination from auth-broker with retry and token refresh
-     * @param destination Destination name
-     * @param forceRefresh Force token refresh
-     */
-    getJwtToken(destination: string, forceRefresh?: boolean): Promise<string>;
-    /**
-     * Decode JWT exp claim (seconds since epoch). Returns null if not parseable.
-     */
-    private decodeJwtExp;
-    /**
-     * Cache token with expiry derived from JWT, and schedule proactive refresh
-     * 5 minutes before expiry.
-     */
-    private cacheToken;
-    /**
-     * Schedule background refresh REFRESH_LEAD_MS before token expiry.
-     */
-    private scheduleProactiveRefresh;
-    /**
-     * Background refresh via auth-broker's refreshToken grant.
+     * The `Authorization` header value for a destination, or `null` when this
+     * credential is not a header at all.
+     *
+     * A complete header value, not a token: the caller puts it on the request as
+     * it stands. The credential is asked every time because it renews behind this
+     * call — a cache here would serve the stale token and hide the renewal the
+     * broker exists to do, which is precisely what the token cache, the JWT `exp`
+     * decoder and the per-destination refresh timer that used to live here did.
+     *
+     * Retried, because a refusal here is not always an answer. In the standalone
+     * proxy an authentication failure is FATAL — it exits so something can start
+     * it again — so without this a single transient UAA 503 kills a proxy that
+     * used to ride it out. Only failures that can get better are retried;
+     * `isRetryableError` says which, and a missing service key is not one of
+     * them, so it fails on the first attempt instead of three times slower.
      */
-    private proactiveRefresh;
+    getAuthorizationHeader(destination: string): Promise<string | null>;
     /**
-     * Cancel all pending refresh timers. Call on shutdown.
+     * Turn the broker's failure into one that names what this proxy needs.
+     *
+     * The broker speaks of `.env` and `mcp.env` because it can be fed either way.
+     * This proxy only ever reads service keys, so passing that message through
+     * told the most common failure — a missing key — to go and create a file that
+     * would be ignored.
      */
+    private explainAuthFailure;
     dispose(): void;
     /**
      * Get the target service URL for a destination.
      * Priority: config.targetUrl > service key's serviceUrl
      */
     getTargetUrl(destination: string): Promise<string>;
-    /**
-     * Helper function to extract string value from header (handles arrays)
-     */
-    private getHeaderValue;
-    /**
-     * Build proxy request with JWT token (BTP authentication only)
-     *
-     * Process flow:
-     *
-     * 1. BTP Authentication (XSUAA):
-     *    1.1 If x-sap-destination header exists:
-     *        - Check map for broker with key = destination, get or create, save to map
-     *        - Get token from xsuaa broker
-     *        - Add/replace Authorization: Bearer <token> header
-     *    1.2 If header doesn't exist but --btp parameter exists:
-     *        - Use destination from parameter, get or create broker, save to map
-     *        - Get token from xsuaa broker
-     *        - Add/replace Authorization: Bearer <token> header
-     *    1.3 If neither header nor parameter:
-     *        - Do nothing, pass request further
-     */
-    private buildProxyRequest;
-    /**
-     * Proxy MCP request to target server with retry, circuit breaker, and error handling
-     */
-    proxyRequest(originalRequest: ProxyRequest, routingDecision: RoutingDecision, originalHeaders: Record<string, string | string[] | undefined>): Promise<ProxyResponse>;
     /**
      * Create a new BtpProxy instance
      */

package/dist/proxy/btpProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"btpProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/btpProxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,2BAA2B,CAAC;AAgBrE,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AA8DnE;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAU3C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAGD,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,oBAAoB,CAAa;IACzC,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,UAAU,CACN;IACZ,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAU;gBAEZ,oBAAoB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAqF3E;;;OAGG;IACU,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3D;;;;OAIG;YACW,wBAAwB;IAiGtC;;OAEG;YACW,uBAAuB;IAyFrC;;;;OAIG;IACG,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,OAAe,GAC5B,OAAO,CAAC,MAAM,CAAC;IAiHlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;;OAGG;IACH,OAAO,CAAC,UAAU;IASlB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA6BhC;;OAEG;YACW,gBAAgB;IAU9B;;OAEG;IACI,OAAO,IAAI,IAAI;IAStB;;;OAGG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAexD;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;;OAgBG;YACW,iBAAiB;IAmT/B;;OAEG;IACG,YAAY,CAChB,eAAe,EAAE,YAAY,EAC7B,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAC7D,OAAO,CAAC,aAAa,CAAC;IAiLzB;;OAEG;WACiB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;CAuC7E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAEnB"}
+{"version":3,"file":"btpProxy.d.ts","sourceRoot":"","sources":["../../src/proxy/btpProxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,2BAA2B,CAAC;AAOrE,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA+DhE;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAU3C;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,oBAAoB,CAAa;IACzC,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAU;gBAEZ,oBAAoB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAsC3E;;;OAGG;IACU,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3D;;;;OAIG;YACW,wBAAwB;IAiGtC;;OAEG;YACW,uBAAuB;IAyFrC;;;;;;;;;;;;;;;;OAgBG;IACG,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+BzE;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAuBnB,OAAO,IAAI,IAAI;IAKtB;;;OAGG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAexD;;OAEG;WACiB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;CAuC7E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAEnB"}