@aaron-pienza/mcp-server-salesforce 1.0.1 → 1.0.2

package/dist/tools/executeAnonymous.js

@@ -45,6 +45,16 @@ Notes:
         required: ["apexCode"]
     }
 };
+async function resolveCurrentUserId(conn) {
+    const directId = conn?.userInfo?.id || conn?.userInfo?.user_id;
+    if (directId)
+        return directId;
+    if (typeof conn?.identity === 'function') {
+        const identity = await conn.identity();
+        return identity?.user_id || identity?.id;
+    }
+    return undefined;
+}
 /**
  * Handles executing anonymous Apex code in Salesforce
  * @param conn Active Salesforce connection
@@ -93,10 +103,22 @@ export async function handleExecuteAnonymous(conn, args) {
         // Get debug logs if available
         if (result.compiled) {
             try {
+                const currentUserId = await resolveCurrentUserId(conn);
+                if (!currentUserId) {
+                    responseText += `\n**Debug Log:** Unable to determine the current Salesforce user, so logs were not retrieved safely.`;
+                    return {
+                        content: [{
+                                type: "text",
+                                text: responseText
+                            }],
+                        isError: !result.success,
+                    };
+                }
                 // Query for the most recent debug log
                 const logs = await conn.query(`
           SELECT Id, LogUserId, Operation, Application, Status, LogLength, LastModifiedDate, Request
           FROM ApexLog 
+          WHERE LogUserId = '${currentUserId}'
           ORDER BY LastModifiedDate DESC 
           LIMIT 1
         `);

package/dist/tools/manageDebugLogs.js

@@ -86,6 +86,15 @@ Notes:
         required: ["operation", "username"]
     }
 };
+function ensureSaveResultSuccess(result, action) {
+    if (result?.success !== false) {
+        return;
+    }
+    const errors = Array.isArray(result.errors)
+        ? result.errors.map((error) => typeof error === 'string' ? error : error?.message || JSON.stringify(error))
+        : result?.errors ? [String(result.errors)] : [];
+    throw new Error(`${action} failed${errors.length > 0 ? `: ${errors.join(', ')}` : ''}`);
+}
 /**
  * Handles managing debug logs for Salesforce users
  * @param conn Active Salesforce connection
@@ -193,12 +202,13 @@ export async function handleManageDebugLogs(conn, args) {
                     // Update existing trace flag
                     traceFlagId = existingTraceFlag.records[0].Id;
                     debugLevelId = existingTraceFlag.records[0].DebugLevelId;
-                    await conn.tooling.sobject('TraceFlag').update({
+                    const updateResult = await conn.tooling.sobject('TraceFlag').update({
                         Id: traceFlagId,
                         LogType: 'USER_DEBUG',
                         StartDate: new Date().toISOString(),
                         ExpirationDate: expirationDate.toISOString()
                     });
+                    ensureSaveResultSuccess(updateResult, 'Updating trace flag');
                     operation = 'updated';
                 }
                 else {
@@ -215,6 +225,7 @@ export async function handleManageDebugLogs(conn, args) {
                         Visualforce: args.logLevel,
                         Workflow: args.logLevel
                     });
+                    ensureSaveResultSuccess(debugLevelResult, 'Creating debug level');
                     debugLevelId = debugLevelResult.id;
                     // Create a new trace flag
                     const traceFlagResult = await conn.tooling.sobject('TraceFlag').create({
@@ -224,6 +235,7 @@ export async function handleManageDebugLogs(conn, args) {
                         StartDate: new Date().toISOString(),
                         ExpirationDate: expirationDate.toISOString()
                     });
+                    ensureSaveResultSuccess(traceFlagResult, 'Creating trace flag');
                     traceFlagId = traceFlagResult.id;
                     operation = 'enabled';
                 }
@@ -254,6 +266,7 @@ export async function handleManageDebugLogs(conn, args) {
                     // Delete trace flags instead of updating expiration date
                     const traceFlagIds = traceFlags.records.map((tf) => tf.Id);
                     const deleteResults = await Promise.all(traceFlagIds.map((id) => conn.tooling.sobject('TraceFlag').delete(id)));
+                    deleteResults.forEach((result) => ensureSaveResultSuccess(result, 'Deleting trace flag'));
                     return {
                         content: [{
                                 type: "text",
@@ -273,6 +286,7 @@ export async function handleManageDebugLogs(conn, args) {
                             Id: id,
                             ExpirationDate: nearFutureExpiration.toISOString()
                         })));
+                        updateResults.forEach((result) => ensureSaveResultSuccess(result, 'Updating trace flag expiration'));
                         return {
                             content: [{
                                     type: "text",
@@ -297,12 +311,13 @@ export async function handleManageDebugLogs(conn, args) {
               SELECT Id, LogUserId, Operation, Application, Status, LogLength, LastModifiedDate, Request
               FROM ApexLog 
               WHERE Id = '${escapeSoqlValue(args.logId)}'
+              AND LogUserId = '${escapeSoqlValue(user.Id)}'
             `);
                         if (logQuery.records.length === 0) {
                             return {
                                 content: [{
                                         type: "text",
-                                        text: `No log found with ID '${args.logId}'.`
+                                        text: `No log found with ID '${args.logId}' for user '${args.username}'.`
                                     }]
                             };
                         }

package/dist/tools/searchAll.js

@@ -35,7 +35,7 @@ Notes:
 - Use * and ? for wildcards in search terms
 - Each object can have its own WHERE, ORDER BY, and LIMIT clauses
 - Support for WITH clauses: DATA CATEGORY, DIVISION, METADATA, NETWORK, PRICEBOOKID, SNIPPET, SECURITY_ENFORCED
-- "updateable" and "viewable" options control record access filtering`,
+- The updateable/viewable filters are reserved for future support and currently return a clear error if requested`,
     inputSchema: {
         type: "object",
         properties: {
@@ -112,12 +112,12 @@ Notes:
             },
             updateable: {
                 type: "boolean",
-                description: "Return only updateable records",
+                description: "Reserved for future support. If set, the tool returns an error instead of generating invalid SOSL.",
                 optional: true
             },
             viewable: {
                 type: "boolean",
-                description: "Return only viewable records",
+                description: "Reserved for future support. If set, the tool returns an error instead of generating invalid SOSL.",
                 optional: true
             }
         },
@@ -147,6 +147,15 @@ export async function handleSearchAll(conn, args) {
         if (!searchTerm.trim()) {
             throw new Error('Search term cannot be empty');
         }
+        if (updateable || viewable) {
+            return {
+                content: [{
+                        type: "text",
+                        text: 'The updateable/viewable filters are not currently supported by this tool. Remove those flags and retry the SOSL search.'
+                    }],
+                isError: true,
+            };
+        }
         // Validate object names
         for (const obj of objects) {
             const objValidation = validateIdentifier(obj.name);
@@ -172,19 +181,10 @@ export async function handleSearchAll(conn, args) {
         const withClausesStr = withClauses
             ? withClauses.map(buildWithClause).join(' ')
             : '';
-        // Add updateable/viewable flags if specified
-        const accessFlags = [];
-        if (updateable)
-            accessFlags.push('UPDATEABLE');
-        if (viewable)
-            accessFlags.push('VIEWABLE');
-        const accessClause = accessFlags.length > 0 ?
-            ` RETURNING ${accessFlags.join(',')}` : '';
         // Construct complete SOSL query
         const soslQuery = `FIND {${escapeSoslSearchTerm(searchTerm)}} IN ${searchIn}
       ${withClausesStr}
-      RETURNING ${returningClause}
-      ${accessClause}`.trim();
+      RETURNING ${returningClause}`.trim();
         // Execute search
         const result = await conn.search(soslQuery);
         // Format results by object

package/dist/utils/connection.d.ts

@@ -1,4 +1,12 @@
-import { ConnectionConfig } from '../types/connection.js';
+import { ConnectionConfig, SalesforceCLIResponse } from '../types/connection.js';
+/**
+ * Executes the Salesforce CLI command to get org information
+ * @returns Parsed response from sf org display --json command
+ */
+export declare function getSalesforceOrgInfo(execSfOrgDisplay?: () => Promise<{
+    stdout: string;
+    stderr: string;
+}>): Promise<SalesforceCLIResponse>;
 /**
  * Creates a Salesforce connection using either username/password or OAuth 2.0 Client Credentials Flow
  * @param config Optional connection configuration

package/dist/utils/connection.js

@@ -12,22 +12,22 @@ const OAUTH_TIMEOUT = 30000; // 30 seconds for OAuth token request
  * Executes the Salesforce CLI command to get org information
  * @returns Parsed response from sf org display --json command
  */
-async function getSalesforceOrgInfo() {
+export async function getSalesforceOrgInfo(execSfOrgDisplay = () => execFileAsync('sf', ['org', 'display', '--json'])) {
     try {
         console.error(`Executing Salesforce CLI: sf org display --json`);
         let stdout = '';
-        let stderr = '';
         let execError = null;
         try {
             // Use execFile instead of exec to avoid shell injection surface
-            const result = await execFileAsync('sf', ['org', 'display', '--json']);
+            const result = await execSfOrgDisplay();
             stdout = result.stdout;
-            stderr = result.stderr;
         }
         catch (err) {
             execError = err;
+            if (err?.code === 'ENOENT' || err?.message?.includes('command not found') || err?.message?.includes('not recognized')) {
+                throw err;
+            }
             stdout = 'stdout' in err ? err.stdout || '' : '';
-            stderr = 'stderr' in err ? err.stderr || '' : '';
         }
         // Parse JSON — log redacted version only
         let response;

package/dist/utils/logging.js

@@ -6,8 +6,7 @@
  * Logs to stderr (stdout is reserved for MCP JSON-RPC).
  */
 export function logApexExecution(code) {
-    const preview = code.length > 200 ? code.substring(0, 200) + '...' : code;
-    console.error(`[AUDIT] Execute Anonymous Apex — ${code.length} chars — Preview: ${preview.replace(/\n/g, ' ')}`);
+    console.error(`[AUDIT] Execute Anonymous Apex — ${code.length} chars`);
 }
 /**
  * Returns a shallow copy of an object with specified fields replaced by "[REDACTED]".

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aaron-pienza/mcp-server-salesforce",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "MCP server for Salesforce — query, analytics, Apex, REST API passthrough, and more.",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",