@acquis-consulting/asm 1.0.5

package/dist/tools/writeApexTriggers.js

@@ -0,0 +1,96 @@
+import { z } from 'zod/v4';
+import { toolResponse } from '../utils/index.js';
+import { deployApexViaContainer } from '../utils/apexContainer.js';
+export const writeApexTriggersTool = {
+    name: 'salesforce_write_apex_trigger',
+    description: 'Create or update an Apex trigger via the Tooling API. Validates trigger name and object reference in the body.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            operation: {
+                type: 'string',
+                enum: ['create', 'update'],
+            },
+            triggerName: {
+                type: 'string',
+                description: 'The trigger name.',
+            },
+            body: {
+                type: 'string',
+                description: 'The full Apex trigger source code.',
+            },
+            objectName: {
+                type: 'string',
+                description: 'The Salesforce object this trigger is on (required for create).',
+            },
+            apiVersion: {
+                type: 'string',
+                description: 'Salesforce API version. Default: "58.0".',
+            },
+        },
+        required: ['operation', 'triggerName', 'body'],
+    },
+};
+export async function handleWriteApexTriggers(conn, args) {
+    const { operation, triggerName, body, objectName, apiVersion = '58.0' } = args;
+    const namePattern = new RegExp(`trigger\\s+${triggerName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'i');
+    if (!namePattern.test(body)) {
+        return toolResponse(`Body does not contain "trigger ${triggerName}".`, true);
+    }
+    try {
+        if (operation === 'create') {
+            if (!objectName) {
+                return toolResponse('Create requires "objectName" parameter.', true);
+            }
+            const onPattern = new RegExp(`on\\s+${objectName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'i');
+            if (!onPattern.test(body)) {
+                return toolResponse(`Body does not contain "on ${objectName}".`, true);
+            }
+            const existing = await conn.tooling.query(`SELECT Id FROM ApexTrigger WHERE Name = '${triggerName.replace(/'/g, "\\'")}'`);
+            if (existing.records && existing.records.length > 0) {
+                return toolResponse(`Trigger "${triggerName}" already exists. Use "update" instead.`, true);
+            }
+            const result = await conn.tooling.sobject('ApexTrigger').create({
+                Name: triggerName,
+                Body: body,
+                TableEnumOrId: objectName,
+                ApiVersion: apiVersion,
+            });
+            if (!result.success) {
+                return toolResponse(`Failed to create trigger: ${JSON.stringify(result.errors)}`, true);
+            }
+            return toolResponse(`Trigger "${triggerName}" created on ${objectName}.\nID: ${result.id}\nAPI Version: ${apiVersion}`);
+        }
+        // Update
+        const existing = await conn.tooling.query(`SELECT Id, TableEnumOrId, LastModifiedDate FROM ApexTrigger WHERE Name = '${triggerName.replace(/'/g, "\\'")}'`);
+        if (!existing.records || existing.records.length === 0) {
+            return toolResponse(`Trigger "${triggerName}" not found. Use "create" instead.`, true);
+        }
+        const trg = existing.records[0];
+        const onPattern = new RegExp(`on\\s+${trg.TableEnumOrId.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'i');
+        if (!onPattern.test(body)) {
+            return toolResponse(`Body must reference the existing object "${trg.TableEnumOrId}". Found trigger on a different object.`, true);
+        }
+        const error = await deployApexViaContainer(conn, 'ApexTriggerMember', trg.Id, body, triggerName);
+        if (error)
+            return toolResponse(`Failed to update trigger: ${error}`, true);
+        return toolResponse(`Trigger "${triggerName}" updated.\nID: ${trg.Id}\nObject: ${trg.TableEnumOrId}\nPrevious modified: ${trg.LastModifiedDate}`);
+    }
+    catch (error) {
+        return toolResponse(`Trigger ${operation} failed: ${error.message}`, true);
+    }
+}
+export const writeApexTriggersSchema = {
+    operation: z.enum(['create', 'update']),
+    triggerName: z.string().describe('The trigger name.'),
+    body: z.string().describe('The full Apex trigger source code.'),
+    objectName: z.string().describe('The Salesforce object this trigger is on (required for create).').optional(),
+    apiVersion: z.string().describe('Salesforce API version. Default: "58.0".').optional(),
+};
+export const writeApexTriggersDescriptor = {
+    name: 'salesforce_write_apex_trigger',
+    description: writeApexTriggersTool.description,
+    schema: writeApexTriggersSchema,
+    handler: handleWriteApexTriggers,
+};
+//# sourceMappingURL=writeApexTriggers.js.map

package/dist/tools/writeApexTriggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeApexTriggers.js","sourceRoot":"","sources":["../../src/tools/writeApexTriggers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,+BAA+B;IACrC,WAAW,EAAE,gHAAgH;IAC7H,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,SAAS,EAAE;gBACT,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aAC3B;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,mBAAmB;aACjC;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,oCAAoC;aAClD;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,iEAAiE;aAC/E;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0CAA0C;aACxD;SACF;QACD,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC;KAC/C;CACF,CAAC;AAUF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAgB,EAAE,IAA2B;IACzF,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;IAE/E,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,cAAc,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACxG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,kCAAkC,WAAW,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,YAAY,CAAC,yCAAyC,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,SAAS,UAAU,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAChG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,OAAO,YAAY,CAAC,6BAA6B,UAAU,IAAI,EAAE,IAAI,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CACvC,4CAA4C,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAChF,CAAC;YACF,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,YAAY,WAAW,yCAAyC,EAAE,IAAI,CAAC,CAAC;YAC9F,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBAC9D,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,IAAI;gBACV,aAAa,EAAE,UAAU;gBACzB,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YAEH,IAAI,CAAE,MAAc,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAE,MAAc,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnG,CAAC;YAED,OAAO,YAAY,CACjB,YAAY,WAAW,gBAAgB,UAAU,UAAW,MAAc,CAAC,EAAE,kBAAkB,UAAU,EAAE,CAC5G,CAAC;QACJ,CAAC;QAED,SAAS;QACT,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CACvC,6EAA6E,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CACjH,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,YAAY,CAAC,YAAY,WAAW,oCAAoC,EAAE,IAAI,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAQ,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,YAAY,CACjB,4CAA4C,GAAG,CAAC,aAAa,yCAAyC,EACtG,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjG,IAAI,KAAK;YAAE,OAAO,YAAY,CAAC,6BAA6B,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3E,OAAO,YAAY,CACjB,YAAY,WAAW,mBAAmB,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,aAAa,wBAAwB,GAAG,CAAC,gBAAgB,EAAE,CAC7H,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC,WAAW,SAAS,YAAY,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC,CAAC,QAAQ,EAAE;IAC7G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,QAAQ,EAAE;CACvF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,IAAI,EAAE,+BAA+B;IACrC,WAAW,EAAE,qBAAqB,CAAC,WAAW;IAC9C,MAAM,EAAE,uBAAuB;IAC/B,OAAO,EAAE,uBAAuB;CACjC,CAAC"}

package/dist/types/connection.d.ts

@@ -0,0 +1,20 @@
+export declare enum ConnectionType {
+    UsernamePassword = "username_password",
+    OAuth2ClientCredentials = "oauth2_client_credentials",
+    SalesforceCli = "sfdx_cli",
+    AccessToken = "access_token",
+    OAuth2WebFlow = "oauth2_web_flow"
+}
+export interface ConnectionConfig {
+    type?: ConnectionType;
+    loginUrl?: string;
+}
+export interface SalesforceCliResponse {
+    status: number;
+    result: {
+        accessToken: string;
+        instanceUrl: string;
+        username: string;
+        id: string;
+    };
+}

package/dist/types/connection.js

@@ -0,0 +1,9 @@
+export var ConnectionType;
+(function (ConnectionType) {
+    ConnectionType["UsernamePassword"] = "username_password";
+    ConnectionType["OAuth2ClientCredentials"] = "oauth2_client_credentials";
+    ConnectionType["SalesforceCli"] = "sfdx_cli";
+    ConnectionType["AccessToken"] = "access_token";
+    ConnectionType["OAuth2WebFlow"] = "oauth2_web_flow";
+})(ConnectionType || (ConnectionType = {}));
+//# sourceMappingURL=connection.js.map

package/dist/types/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/types/connection.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,wDAAsC,CAAA;IACtC,uEAAqD,CAAA;IACrD,4CAA0B,CAAA;IAC1B,8CAA4B,CAAA;IAC5B,mDAAiC,CAAA;AACnC,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB"}

package/dist/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './salesforce.js';
+export * from './connection.js';
+export * from './metadata.js';

package/dist/types/index.js

@@ -0,0 +1,4 @@
+export * from './salesforce.js';
+export * from './connection.js';
+export * from './metadata.js';
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/types/metadata.d.ts

@@ -0,0 +1,44 @@
+export interface CustomObjectMetadata {
+    fullName: string;
+    label: string;
+    pluralLabel: string;
+    nameField: {
+        label: string;
+        type: string;
+        displayFormat?: string;
+    };
+    deploymentStatus: string;
+    sharingModel: string;
+    description?: string;
+}
+export interface PicklistValueDefinition {
+    fullName: string;
+    default: boolean;
+    label: string;
+}
+export interface PicklistValueSet {
+    sorted: boolean;
+    controllingField?: string;
+    valueSetDefinition: {
+        value: PicklistValueDefinition[];
+        sorted: boolean;
+    };
+}
+export interface CustomFieldMetadata {
+    fullName: string;
+    label: string;
+    type: string;
+    required?: boolean;
+    unique?: boolean;
+    externalId?: boolean;
+    length?: number;
+    precision?: number;
+    scale?: number;
+    referenceTo?: string;
+    relationshipLabel?: string;
+    relationshipName?: string;
+    deleteConstraint?: string;
+    description?: string;
+    valueSet?: PicklistValueSet;
+    visibleLines?: number;
+}

package/dist/types/metadata.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=metadata.js.map

package/dist/types/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/types/metadata.ts"],"names":[],"mappings":""}

package/dist/types/salesforce.d.ts

@@ -0,0 +1,38 @@
+export interface SalesforceObjectDescriptor {
+    name: string;
+    label: string;
+    custom: boolean;
+}
+export interface SalesforcePicklistValue {
+    value: string;
+    label: string;
+    active: boolean;
+    defaultValue: boolean;
+}
+export interface SalesforceFieldDescriptor {
+    name: string;
+    label: string;
+    type: string;
+    nillable: boolean;
+    length: number;
+    picklistValues: SalesforcePicklistValue[];
+    defaultValue: any;
+    referenceTo: string[];
+}
+export interface SalesforceDescribeResponse {
+    name: string;
+    label: string;
+    custom: boolean;
+    fields: SalesforceFieldDescriptor[];
+    childRelationships: any[];
+}
+export interface SalesforceDmlResult {
+    success: boolean;
+    id?: string;
+    errors: SalesforceDmlError[] | SalesforceDmlError;
+}
+export interface SalesforceDmlError {
+    statusCode: string;
+    message: string;
+    fields: string[];
+}

package/dist/types/salesforce.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=salesforce.js.map

package/dist/types/salesforce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salesforce.js","sourceRoot":"","sources":["../../src/types/salesforce.ts"],"names":[],"mappings":""}

package/dist/utils/apexContainer.d.ts

@@ -0,0 +1,18 @@
+import { Connection } from 'jsforce';
+type MemberType = 'ApexClassMember' | 'ApexTriggerMember';
+/**
+ * Update Apex source (class or trigger) via the MetadataContainer flow.
+ * Direct PATCH on ApexClass/ApexTrigger body is blocked by Salesforce
+ * ("INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY") in scratch orgs & sandboxes.
+ *
+ * Steps:
+ * 1. Create MetadataContainer
+ * 2. Create ApexClassMember / ApexTriggerMember
+ * 3. Deploy via ContainerAsyncRequest
+ * 4. Poll until Completed or Failed
+ * 5. Delete container (cleanup)
+ *
+ * Returns null on success, or an error message string on failure.
+ */
+export declare function deployApexViaContainer(conn: Connection, memberType: MemberType, contentEntityId: string, body: string, label: string): Promise<string | null>;
+export {};

package/dist/utils/apexContainer.js

@@ -0,0 +1,79 @@
+/**
+ * Update Apex source (class or trigger) via the MetadataContainer flow.
+ * Direct PATCH on ApexClass/ApexTrigger body is blocked by Salesforce
+ * ("INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY") in scratch orgs & sandboxes.
+ *
+ * Steps:
+ * 1. Create MetadataContainer
+ * 2. Create ApexClassMember / ApexTriggerMember
+ * 3. Deploy via ContainerAsyncRequest
+ * 4. Poll until Completed or Failed
+ * 5. Delete container (cleanup)
+ *
+ * Returns null on success, or an error message string on failure.
+ */
+export async function deployApexViaContainer(conn, memberType, contentEntityId, body, label) {
+    const containerName = `McpUpdate_${Date.now()}`;
+    let containerId;
+    try {
+        // Step 1: create container
+        const containerResult = await conn.tooling.sobject('MetadataContainer')
+            .create({ Name: containerName });
+        if (!containerResult.success) {
+            return `MetadataContainer create failed: ${JSON.stringify(containerResult.errors)}`;
+        }
+        containerId = containerResult.id;
+        // Step 2: create member
+        const memberResult = await conn.tooling.sobject(memberType).create({
+            MetadataContainerId: containerId,
+            ContentEntityId: contentEntityId,
+            Body: body,
+        });
+        if (!memberResult.success) {
+            return `${memberType} create failed: ${JSON.stringify(memberResult.errors)}`;
+        }
+        // Step 3: deploy
+        const deployResult = await conn.tooling.sobject('ContainerAsyncRequest').create({
+            MetadataContainerId: containerId,
+            IsCheckOnly: false,
+        });
+        if (!deployResult.success) {
+            return `ContainerAsyncRequest create failed: ${JSON.stringify(deployResult.errors)}`;
+        }
+        const requestId = deployResult.id;
+        // Step 4: poll
+        const POLL_INTERVAL_MS = 1000;
+        const TIMEOUT_MS = 60000;
+        const deadline = Date.now() + TIMEOUT_MS;
+        let state = 'Queued';
+        let errorMsg = '';
+        while (Date.now() < deadline) {
+            await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+            const status = await conn.tooling.query(`SELECT State, ErrorMsg FROM ContainerAsyncRequest WHERE Id = '${requestId}'`);
+            const rec = status.records?.[0];
+            state = rec?.State ?? 'Queued';
+            errorMsg = rec?.ErrorMsg ?? '';
+            if (state === 'Completed' || state === 'Failed' || state === 'Error' || state === 'Aborted')
+                break;
+        }
+        if (state !== 'Completed') {
+            return `Deployment ${state} for ${label}.${errorMsg ? ' ' + errorMsg : ''}`;
+        }
+        return null;
+    }
+    catch (err) {
+        return err.message;
+    }
+    finally {
+        // Step 5: cleanup — delete container (cascades to members + request)
+        if (containerId) {
+            try {
+                await conn.tooling.sobject('MetadataContainer').destroy(containerId);
+            }
+            catch {
+                // best-effort cleanup
+            }
+        }
+    }
+}
+//# sourceMappingURL=apexContainer.js.map

package/dist/utils/apexContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apexContainer.js","sourceRoot":"","sources":["../../src/utils/apexContainer.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAgB,EAChB,UAAsB,EACtB,eAAuB,EACvB,IAAY,EACZ,KAAa;IAEb,MAAM,aAAa,GAAG,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAChD,IAAI,WAA+B,CAAC;IAEpC,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,eAAe,GAAG,MAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAS;aAC7E,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAQ,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,CAAC;QACD,WAAW,GAAG,eAAe,CAAC,EAAE,CAAC;QAEjC,wBAAwB;QACxB,MAAM,YAAY,GAAG,MAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAS,CAAC,MAAM,CAAC;YAC1E,mBAAmB,EAAE,WAAW;YAChC,eAAe,EAAE,eAAe;YAChC,IAAI,EAAE,IAAI;SACX,CAAQ,CAAC;QACV,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,GAAG,UAAU,mBAAmB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,CAAC;QAED,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAS,CAAC,MAAM,CAAC;YACvF,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAE,KAAK;SACnB,CAAQ,CAAC;QACV,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,wCAAwC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC;QAElC,eAAe;QACf,MAAM,gBAAgB,GAAG,IAAI,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAM,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QACzC,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CACrC,iEAAiE,SAAS,GAAG,CACvE,CAAC;YACT,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAQ,CAAC;YACvC,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,QAAQ,CAAC;YAC/B,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC/B,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;QACrG,CAAC;QAED,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,OAAO,cAAc,KAAK,QAAQ,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,qEAAqE;QACrE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/utils/connection.d.ts

@@ -0,0 +1,3 @@
+import { Connection } from 'jsforce';
+import { type ConnectionConfig } from '../types/index.js';
+export declare function createConnection(config?: ConnectionConfig): Promise<Connection>;

package/dist/utils/connection.js

@@ -0,0 +1,135 @@
+import { Connection } from 'jsforce';
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import { ConnectionType } from '../types/index.js';
+import { getAccessToken, getSelectedOrgId, setSelectedOrgId } from './tokenBroker.js';
+import { getOAuthWebFlowToken } from './oauthWebFlow.js';
+const execAsync = promisify(exec);
+function resolveLoginUrl(config) {
+    if (config?.loginUrl)
+        return config.loginUrl;
+    if (process.env.SALESFORCE_INSTANCE_URL)
+        return process.env.SALESFORCE_INSTANCE_URL;
+    return 'https://login.salesforce.com';
+}
+function resolveConnectionType() {
+    const envType = process.env.SALESFORCE_CONNECTION_TYPE;
+    if (envType === 'oauth2_client_credentials')
+        return ConnectionType.OAuth2ClientCredentials;
+    if (envType === 'sfdx_cli')
+        return ConnectionType.SalesforceCli;
+    if (envType === 'access_token')
+        return ConnectionType.AccessToken;
+    if (envType === 'username_password')
+        return ConnectionType.UsernamePassword;
+    return ConnectionType.OAuth2WebFlow;
+}
+async function loginWithUsernamePassword(config) {
+    const username = process.env.SALESFORCE_USERNAME;
+    const password = process.env.SALESFORCE_PASSWORD;
+    const token = process.env.SALESFORCE_TOKEN || '';
+    if (!username || !password) {
+        throw new Error('SALESFORCE_USERNAME and SALESFORCE_PASSWORD environment variables are required for username/password authentication');
+    }
+    const conn = new Connection({ loginUrl: resolveLoginUrl(config) });
+    await conn.login(username, password + token);
+    return conn;
+}
+async function loginWithOAuth2(config) {
+    const clientId = process.env.SALESFORCE_CLIENT_ID;
+    const clientSecret = process.env.SALESFORCE_CLIENT_SECRET;
+    const instanceUrl = process.env.SALESFORCE_INSTANCE_URL;
+    if (!clientId || !clientSecret || !instanceUrl) {
+        throw new Error('SALESFORCE_CLIENT_ID, SALESFORCE_CLIENT_SECRET, and SALESFORCE_INSTANCE_URL are required for OAuth2 client credentials authentication');
+    }
+    const tokenUrl = `${instanceUrl}/services/oauth2/token`;
+    const params = new URLSearchParams({
+        grant_type: 'client_credentials',
+        client_id: clientId,
+        client_secret: clientSecret,
+    });
+    const response = await fetch(tokenUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: params.toString(),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`OAuth2 token request failed (${response.status}): ${errorText}`);
+    }
+    const tokenData = await response.json();
+    const conn = new Connection({
+        instanceUrl: tokenData.instance_url,
+        accessToken: tokenData.access_token,
+    });
+    return conn;
+}
+async function loginWithSalesforceCli() {
+    try {
+        const { stdout } = await execAsync('sf org display --json');
+        const parsed = JSON.parse(stdout);
+        if (parsed.status !== 0) {
+            throw new Error('Salesforce CLI returned non-zero status. Ensure a default org is set.');
+        }
+        const { accessToken, instanceUrl } = parsed.result;
+        if (!accessToken || !instanceUrl) {
+            throw new Error('Salesforce CLI response missing accessToken or instanceUrl');
+        }
+        return new Connection({ instanceUrl, accessToken });
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new Error('Salesforce CLI (sf) is not installed. Install it from https://developer.salesforce.com/tools/salesforcecli');
+        }
+        if (error.message?.includes('no default org')) {
+            throw new Error('No default Salesforce org set. Run: sf org login web --set-default');
+        }
+        throw new Error(`Salesforce CLI authentication failed: ${error.message}`);
+    }
+}
+// Detects unresolved manifest template placeholders like "${user_config.foo}"
+function isTemplatePlaceholder(value) {
+    return /^\$\{[^}]+\}$/.test(value.trim());
+}
+async function loginWithOAuth2WebFlow() {
+    const token = getOAuthWebFlowToken();
+    if (!token) {
+        throw new Error('Not authenticated. You MUST call salesforce_login first. ' +
+            'Choose environment: production, sandbox, or custom.');
+    }
+    return new Connection({ instanceUrl: token.instanceUrl, accessToken: token.accessToken });
+}
+async function loginWithAccessToken() {
+    // Only use ACQUIS_ORG_ID if it is a real value, not an unresolved manifest placeholder
+    const envOrgId = process.env.ACQUIS_ORG_ID;
+    if (envOrgId && !isTemplatePlaceholder(envOrgId)) {
+        setSelectedOrgId(envOrgId);
+    }
+    const orgId = getSelectedOrgId();
+    if (!orgId) {
+        throw new Error('No Salesforce org has been selected for this session. ' +
+            'You MUST call the salesforce_select_org tool first (with no arguments) to see the list of ' +
+            'available orgs, then call it again with the desired org_id to select one. ' +
+            'All other Salesforce tools will fail until an org is selected.');
+    }
+    const { accessToken, instanceUrl } = await getAccessToken(orgId);
+    return new Connection({ instanceUrl, accessToken });
+}
+export async function createConnection(config) {
+    const type = config?.type || resolveConnectionType();
+    switch (type) {
+        case ConnectionType.UsernamePassword:
+            return loginWithUsernamePassword(config);
+        case ConnectionType.OAuth2ClientCredentials:
+            return loginWithOAuth2(config);
+        case ConnectionType.SalesforceCli:
+            return loginWithSalesforceCli();
+        case ConnectionType.AccessToken:
+            return loginWithAccessToken();
+        case ConnectionType.OAuth2WebFlow:
+            return loginWithOAuth2WebFlow();
+        default:
+            throw new Error(`Unknown connection type: ${type}`);
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/utils/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/utils/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,cAAc,EAAqD,MAAM,mBAAmB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,SAAS,eAAe,CAAC,MAAyB;IAChD,IAAI,MAAM,EAAE,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACpF,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACvD,IAAI,OAAO,KAAK,2BAA2B;QAAE,OAAO,cAAc,CAAC,uBAAuB,CAAC;IAC3F,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAChE,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC,WAAW,CAAC;IAClE,IAAI,OAAO,KAAK,mBAAmB;QAAE,OAAO,cAAc,CAAC,gBAAgB,CAAC;IAC5E,OAAO,cAAc,CAAC,aAAa,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAyB;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAEjD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qHAAqH,CAAC,CAAC;IACzI,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAyB;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,uIAAuI,CAAC,CAAC;IAC3J,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,WAAW,wBAAwB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoD,CAAC;IAE1F,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QAC1B,WAAW,EAAE,SAAS,CAAC,YAAY;QACnC,WAAW,EAAE,SAAS,CAAC,YAAY;KACpC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAA0B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,IAAI,UAAU,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2DAA2D;YAC3D,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,uFAAuF;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC3C,IAAI,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wDAAwD;YACxD,4FAA4F;YAC5F,4EAA4E;YAC5E,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,IAAI,UAAU,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAyB;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAErD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc,CAAC,gBAAgB;YAClC,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC3C,KAAK,cAAc,CAAC,uBAAuB;YACzC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,cAAc,CAAC,aAAa;YAC/B,OAAO,sBAAsB,EAAE,CAAC;QAClC,KAAK,cAAc,CAAC,WAAW;YAC7B,OAAO,oBAAoB,EAAE,CAAC;QAChC,KAAK,cAAc,CAAC,aAAa;YAC/B,OAAO,sBAAsB,EAAE,CAAC;QAClC;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/utils/decomposePermissions.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Custom post-retrieve decomposition of Profile and PermissionSet XML files.
+ *
+ * Salesforce DX's built-in decompose flags (decomposeProfilesV2Beta / decomposePermissionSetBeta)
+ * are unreliable, so we replicate the decomposition ourselves after a successful retrieve.
+ *
+ * Each permission block in a monolithic .profile-meta.xml or .permissionset-meta.xml is written
+ * as its own file in a sub-directory, enabling cherry-picking in the metadata diff UI.
+ */
+/**
+ * Walk a tagged retrieve directory, find all monolithic profile/permission-set XML files,
+ * and decompose each into sub-directory permission files.
+ *
+ * @returns Human-readable summary string
+ */
+export declare function decomposeProfilesAndPermSets(taggedDir: string): string;