sap-adt-mcp 0.8.48 → 0.8.49

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sap-adt-mcp",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "mcpName": "io.github.yzonur/sap-adt-mcp",
   "description": "MCP server giving Claude live access to SAP systems via ADT (ABAP Development Tools) REST. Read source, search, run syntax checks, and edit ABAP objects from any MCP-compatible client.",
   "type": "module",

package/src/adt-client.js

@@ -168,8 +168,15 @@ export class AdtClient {
     const token = res.headers.get("x-csrf-token");
     if (!token || token.toLowerCase() === "required") {
       const body = await res.text().catch(() => "");
+      // An HTML body means the host answered with a web page (SSO/login form or a
+      // web-dispatcher error), not the ADT service — usually a wrong host/system
+      // or a system fronted by SSO that basic auth can't pass.
+      const looksHtml = /^\s*<(!doctype html|html\b)/i.test(body);
+      const hint = looksHtml
+        ? " — the host returned an HTML page (likely an SSO/login page or wrong host), not the ADT service. Check the system's host and that it accepts basic-auth ADT access."
+        : "";
       throw new Error(
-        `Failed to fetch CSRF token (status ${res.status}): ${body.slice(0, 200)}`
+        `Failed to fetch CSRF token (status ${res.status})${hint}: ${body.slice(0, 200)}`
       );
     }
     this.csrfToken = token;

package/src/reporter.js

@@ -32,7 +32,11 @@ const SKIP_NAMES = new Set(["ReadOnlyViolationError", "AbortError"]);
 // Configuration / setup mistakes and input-validation errors — the user's
 // environment or a mis-shaped tool call, not a bug in the tool.
 const SKIP_MESSAGE_RE =
-  /(No config found|must be a non-empty string|env var .* is not set|No system specified|Unknown system '|No systems configured|password must be a string|Failed to parse config|is required\b|Unsupported object type|ADT request failed|ADT request timed out|fetch failed)/i;
+  // "Failed to fetch CSRF token": the host didn't behave like an ADT endpoint
+  // (SSO/login page, web dispatcher, wrong host/system) — environmental/auth, not
+  // a tool defect. The CSRF fetch is a fixed simple GET, so it never mis-shapes a
+  // request on our side (#62, and the deleted #58-60 cluster).
+  /(No config found|must be a non-empty string|env var .* is not set|No system specified|Unknown system '|No systems configured|password must be a string|Failed to parse config|is required\b|Unsupported object type|ADT request failed|ADT request timed out|fetch failed|Failed to fetch CSRF token)/i;
 
 // Network / TLS problems live on the user's side (firewall, VPN, cert, host down).
 const NETWORK_CODES = new Set([
@@ -177,7 +181,9 @@ const BUSINESS_T100 = new Set([
   "ADT_DATAPREVIEW_MSG",
 ]);
 const BUSINESS_TYPE_RE =
-  /SaveFailure|Lock|Enqueue|CTS_|ExceptionResourceAlreadyExists|NotFound/i;
+  // NoDependencyGraphDataCalculationPossible: SAP can't compute the dependency
+  // graph for a given CDS entity (system/data-side, not a tool defect — see #22/#61).
+  /SaveFailure|Lock|Enqueue|CTS_|ExceptionResourceAlreadyExists|NotFound|NoDependencyGraphDataCalculation/i;
 
 // Decide whether a non-2xx ADT response that a handler returned (not threw) is
 // likely a defect in *this* tool rather than a user/business condition. Errs