@acquis-consulting/asm 1.0.5

package/dist/utils/oauthWebFlow.js

@@ -0,0 +1,172 @@
+import crypto from 'crypto';
+import http from 'http';
+import { exec } from 'child_process';
+// In-memory token store (cleared on process restart)
+let storedToken = null;
+export function getOAuthWebFlowToken() {
+    return storedToken;
+}
+export function setOAuthWebFlowToken(accessToken, instanceUrl) {
+    storedToken = { accessToken, instanceUrl };
+}
+function generateCodeVerifier() {
+    return crypto.randomBytes(32).toString('base64url');
+}
+function generateCodeChallenge(verifier) {
+    return crypto.createHash('sha256').update(verifier).digest('base64url');
+}
+function generateState() {
+    return crypto.randomBytes(16).toString('hex');
+}
+function openBrowser(url) {
+    const platform = process.platform;
+    let cmd;
+    if (platform === 'darwin') {
+        cmd = `open "${url}"`;
+    }
+    else if (platform === 'win32') {
+        cmd = `start "" "${url}"`;
+    }
+    else {
+        cmd = `xdg-open "${url}"`;
+    }
+    exec(cmd, (err) => {
+        if (err)
+            console.error('[oauth] Failed to open browser:', err.message);
+    });
+}
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head><title>Login Successful</title><style>
+body { font-family: sans-serif; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #f4f6f8; }
+.card { background: white; border-radius: 8px; padding: 40px; text-align: center; box-shadow: 0 2px 12px rgba(0,0,0,0.1); }
+h2 { color: #1a73e8; } p { color: #5f6368; }
+</style></head>
+<body><div class="card"><h2>&#10003; Login successful</h2><p>You can close this tab and return to your AI assistant.</p></div></body>
+</html>`;
+const ERROR_HTML = (msg) => `<!DOCTYPE html>
+<html>
+<head><title>Login Failed</title><style>
+body { font-family: sans-serif; display: flex; align-items: center; justify-content: center; height: 100vh; margin: 0; background: #f4f6f8; }
+.card { background: white; border-radius: 8px; padding: 40px; text-align: center; box-shadow: 0 2px 12px rgba(0,0,0,0.1); }
+h2 { color: #d93025; } p { color: #5f6368; }
+</style></head>
+<body><div class="card"><h2>&#10007; Login failed</h2><p>${msg}</p><p>You can close this tab and try again.</p></div></body>
+</html>`;
+function waitForCallback(port, expectedState, timeoutMs = 120000) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const server = http.createServer((req, res) => {
+            if (!req.url)
+                return;
+            let url;
+            try {
+                url = new URL(req.url, `http://localhost:${port}`);
+            }
+            catch {
+                return;
+            }
+            if (url.pathname !== '/callback') {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const error = url.searchParams.get('error');
+            const errorDescription = url.searchParams.get('error_description') ?? error ?? 'Unknown error';
+            const code = url.searchParams.get('code');
+            const state = url.searchParams.get('state');
+            if (error) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML(errorDescription));
+                if (!settled) {
+                    settled = true;
+                    server.close();
+                    reject(new Error(`Salesforce OAuth error: ${errorDescription}`));
+                }
+                return;
+            }
+            if (!code) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML('No authorization code received.'));
+                return;
+            }
+            if (state !== expectedState) {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(ERROR_HTML('Invalid state parameter. Possible CSRF attempt.'));
+                if (!settled) {
+                    settled = true;
+                    server.close();
+                    reject(new Error('OAuth state mismatch — possible CSRF attempt'));
+                }
+                return;
+            }
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(SUCCESS_HTML);
+            if (!settled) {
+                settled = true;
+                server.close();
+                resolve({ code });
+            }
+        });
+        server.on('error', (err) => {
+            if (!settled) {
+                settled = true;
+                reject(new Error(err.code === 'EADDRINUSE'
+                    ? `Port ${port} is already in use. Set SALESFORCE_OAUTH_CALLBACK_PORT to a different port.`
+                    : `Callback server error: ${err.message}`));
+            }
+        });
+        server.listen(port);
+        const timer = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                server.close();
+                reject(new Error('OAuth callback timed out after 120 seconds. Please try again.'));
+            }
+        }, timeoutMs);
+        // Prevent the timer from blocking Node process exit
+        if (timer.unref)
+            timer.unref();
+    });
+}
+async function exchangeCodeForToken(loginUrl, clientId, redirectUri, code, codeVerifier) {
+    const params = new URLSearchParams({
+        grant_type: 'authorization_code',
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        code,
+        code_verifier: codeVerifier,
+    });
+    const response = await fetch(`${loginUrl}/services/oauth2/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: params.toString(),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Token exchange failed (${response.status}): ${body}`);
+    }
+    const data = await response.json();
+    return { accessToken: data.access_token, instanceUrl: data.instance_url };
+}
+export async function startOAuthWebFlow(loginUrl, clientId, callbackPort) {
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = generateCodeChallenge(codeVerifier);
+    const state = generateState();
+    const redirectUri = `http://localhost:${callbackPort}/callback`;
+    const authUrl = new URL(`${loginUrl}/services/oauth2/authorize`);
+    authUrl.searchParams.set('response_type', 'code');
+    authUrl.searchParams.set('client_id', clientId);
+    authUrl.searchParams.set('redirect_uri', redirectUri);
+    authUrl.searchParams.set('scope', 'api refresh_token');
+    authUrl.searchParams.set('state', state);
+    authUrl.searchParams.set('code_challenge', codeChallenge);
+    authUrl.searchParams.set('code_challenge_method', 'S256');
+    console.error(`[oauth] Opening browser for authorization: ${authUrl.toString()}`);
+    openBrowser(authUrl.toString());
+    const { code } = await waitForCallback(callbackPort, state);
+    const { accessToken, instanceUrl } = await exchangeCodeForToken(loginUrl, clientId, redirectUri, code, codeVerifier);
+    setOAuthWebFlowToken(accessToken, instanceUrl);
+    return { instanceUrl };
+}
+//# sourceMappingURL=oauthWebFlow.js.map

package/dist/utils/oauthWebFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthWebFlow.js","sourceRoot":"","sources":["../../src/utils/oauthWebFlow.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,qDAAqD;AACrD,IAAI,WAAW,GAAwD,IAAI,CAAC;AAE5E,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,WAAmB;IAC3E,WAAW,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,GAAG,GAAG,SAAS,GAAG,GAAG,CAAC;IACxB,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,GAAG,GAAG,aAAa,GAAG,GAAG,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,aAAa,GAAG,GAAG,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;QAChB,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;QAQb,CAAC;AAET,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC;;;;;;;2DAOuB,GAAG;QACtD,CAAC;AAET,SAAS,eAAe,CAAC,IAAY,EAAE,aAAqB,EAAE,SAAS,GAAG,MAAO;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,OAAO;YACrB,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,IAAI,eAAe,CAAC;YAC/F,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACtC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,gBAAgB,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CACd,GAAG,CAAC,IAAI,KAAK,YAAY;oBACvB,CAAC,CAAC,QAAQ,IAAI,6EAA6E;oBAC3F,CAAC,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,oDAAoD;QACpD,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,QAAgB,EAChB,WAAmB,EACnB,IAAY,EACZ,YAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;QACzB,IAAI;QACJ,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,wBAAwB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoD,CAAC;IACrF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,YAAoB;IAC9F,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,oBAAoB,YAAY,WAAW,CAAC;IAEhE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,QAAQ,4BAA4B,CAAC,CAAC;IACjE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,CAAC,KAAK,CAAC,8CAA8C,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClF,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAE5D,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACrH,oBAAoB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE/C,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC"}

package/dist/utils/packageJobs.d.ts

@@ -0,0 +1,17 @@
+/**
+ * In-process job tracking for async retrieve/deploy operations.
+ * The shared status tool uses this store to look up active jobs.
+ */
+import type { Connection } from 'jsforce';
+import type { ComponentMap } from './packageXml.js';
+export interface PackageJob {
+    type: 'retrieve' | 'deploy';
+    id: string;
+    conn: Connection;
+    startedAt: number;
+    outputDirectory?: string;
+    componentMap?: ComponentMap;
+}
+export declare function registerJob(job: PackageJob): void;
+export declare function getJob(id: string): PackageJob | undefined;
+export declare function removeJob(id: string): void;

package/dist/utils/packageJobs.js

@@ -0,0 +1 @@
+const e=new Map;export function registerJob(t){e.set(t.id,t)}export function getJob(t){return e.get(t)}export function removeJob(t){e.delete(t)}

package/dist/utils/packageXml.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Utility for generating package.xml and converting component maps
+ * to jsforce's metadata retrieve format.
+ */
+export interface PackageType {
+    name: string;
+    members: string[];
+}
+export type ComponentMap = Record<string, string[]>;
+/**
+ * Converts a component map like `{ "ApexClass": ["MyClass"] }`
+ * to jsforce's `{ name, members }[]` format.
+ */
+export declare function componentMapToPackageTypes(map: ComponentMap): PackageType[];
+/**
+ * Generates a `package.xml` XML string from a component map.
+ */
+export declare function generatePackageXml(map: ComponentMap, apiVersion?: string): string;

package/dist/utils/packageXml.js

@@ -0,0 +1 @@
+export function componentMapToPackageTypes(e){return Object.entries(e).map(([e,n])=>({name:e,members:n}))}export function generatePackageXml(n,a="62.0"){return`<?xml version="1.0" encoding="UTF-8"?>\n<Package xmlns="http://soap.sforce.com/2006/04/metadata">\n${componentMapToPackageTypes(n).map(n=>`    <types>\n${n.members.map(n=>`        <members>${e(n)}</members>`).join("\n")}\n        <name>${e(n.name)}</name>\n    </types>`).join("\n")}\n    <version>${a}</version>\n</Package>`}function e(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}

package/dist/utils/permissionSetResolver.d.ts

@@ -0,0 +1,14 @@
+import { Connection } from 'jsforce';
+export interface ResolvedPermissionSet {
+    id: string;
+    label: string;
+    type: 'Profile' | 'PermissionSet';
+}
+export interface ResolveResult {
+    resolved: ResolvedPermissionSet[];
+    errors: string[];
+}
+export declare function resolvePermissionSets(conn: Connection, opts: {
+    profileNames?: string[];
+    permissionSetNames?: string[];
+}): Promise<ResolveResult>;

package/dist/utils/permissionSetResolver.js

@@ -0,0 +1 @@
+export async function resolvePermissionSets(e,s){const o=[],r=[];if(s.profileNames?.length)for(const i of s.profileNames)try{const s=await e.query(`SELECT Id FROM Profile WHERE Name = '${i.replace(/'/g,"\\'")}'`);if(!s.records?.length){r.push(`Profile "${i}" not found`);continue}const t=s.records[0].Id,n=await e.query(`SELECT Id, Label FROM PermissionSet WHERE ProfileId = '${t}' AND IsOwnedByProfile = true`);if(!n.records?.length){r.push(`No permission set found for profile "${i}"`);continue}const l=n.records[0];o.push({id:l.Id,label:i,type:"Profile"})}catch(e){r.push(`Failed to resolve profile "${i}": ${e.message}`)}if(s.permissionSetNames?.length)for(const i of s.permissionSetNames)try{const s=await e.query(`SELECT Id, Label FROM PermissionSet WHERE Name = '${i.replace(/'/g,"\\'")}' AND IsOwnedByProfile = false`);if(!s.records?.length){r.push(`Permission set "${i}" not found (use DeveloperName)`);continue}const t=s.records[0];o.push({id:t.Id,label:t.Label,type:"PermissionSet"})}catch(e){r.push(`Failed to resolve permission set "${i}": ${e.message}`)}return{resolved:o,errors:r}}

package/dist/utils/preSelectMatcher.d.ts

@@ -0,0 +1,18 @@
+export interface MatchableFile {
+    metadataType: string | null;
+    componentName: string | null;
+}
+export interface PreSelectionResult {
+    matched: Set<string>;
+    unmatched: string[];
+}
+/**
+ * Resolve pre-selection entries against a list of diff files.
+ *
+ * Each entry can be:
+ * - Bare name: "AccountTrigger" — case-insensitive match on componentName
+ * - Qualified: "ApexClass::AccountTrigger" — exact match on metadataType + componentName
+ *
+ * Returns matched keys as "metadataType::componentName" and unmatched original strings.
+ */
+export declare function resolvePreSelections(preSelections: string[], files: MatchableFile[]): PreSelectionResult;

package/dist/utils/preSelectMatcher.js

@@ -0,0 +1 @@
+export function resolvePreSelections(e,t){const o=new Set,n=[];for(const a of e){const e=a.trim(),m=e.indexOf("::");let r=!1;if(-1!==m){const n=e.substring(0,m).trim(),a=e.substring(m+2).trim();for(const e of t)e.metadataType===n&&e.componentName?.trim()===a&&(o.add(`${e.metadataType}::${e.componentName}`),r=!0)}else{const n=e.toLowerCase();for(const e of t)e.componentName&&e.componentName.trim().toLowerCase()===n&&(o.add(`${e.metadataType}::${e.componentName}`),r=!0)}r||n.push(e)}return{matched:o,unmatched:n}}

package/dist/utils/profileCleanup.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Post-retrieve cleanup for Profile and PermissionSet XML files.
+ *
+ * Salesforce returns the FULL profile/permissionset XML on retrieve,
+ * including permissions for components NOT in the package. Deploying
+ * these unfiltered files would overwrite unrelated permissions in the
+ * target org. This module strips each XML down to only the permission
+ * sections that reference components present in the componentMap.
+ */
+import type { ComponentMap } from './packageXml.js';
+/**
+ * Clean Profile and PermissionSet XML files in the output directory,
+ * keeping only permission sections that reference components in the
+ * componentMap.
+ *
+ * @returns Number of files cleaned.
+ */
+export declare function cleanProfileAndPermissionSetFiles(outputDir: string, componentMap: ComponentMap): Promise<number>;

package/dist/utils/profileCleanup.js

@@ -0,0 +1 @@
+import{readdir as e,readFile as t,writeFile as s}from"node:fs/promises";import{join as n,extname as i}from"node:path";import{XMLParser as o,XMLBuilder as l}from"fast-xml-parser";const r={CustomField:[{element:"fieldPermissions",keyChild:"field"}],CustomObject:[{element:"objectPermissions",keyChild:"object"}],ApexClass:[{element:"classAccesses",keyChild:"apexClass"}],ApexPage:[{element:"pageAccesses",keyChild:"apexPage"}],Layout:[{element:"layoutAssignments",keyChild:"layout"}],RecordType:[{element:"recordTypeVisibilities",keyChild:"recordType"}],CustomTab:[{element:"tabVisibilities",keyChild:"tab"},{element:"tabSettings",keyChild:"tab"}],CustomApplication:[{element:"applicationVisibilities",keyChild:"application"}],Flow:[{element:"flowAccesses",keyChild:"flow"}],CustomPermission:[{element:"customPermissions",keyChild:"name"}],CustomMetadataType:[{element:"customMetadataTypeAccesses",keyChild:"name"}],CustomSetting:[{element:"customSettingAccesses",keyChild:"name"}]},a=new Set(["userPermissions"]),c=new Set(Object.values(r).flatMap(e=>e.map(e=>e.element))),m={ignoreAttributes:!1,attributeNamePrefix:"@_",parseTagValue:!1,trimValues:!1},f={ignoreAttributes:!1,attributeNamePrefix:"@_",format:!0,indentBy:"    ",suppressEmptyNode:!1};export async function cleanProfileAndPermissionSetFiles(d,p){const y=function(e){const t=new Map;for(const[s,n]of Object.entries(e)){if("Profile"===s||"PermissionSet"===s)continue;const e=r[s];if(!e)continue;const i=n.includes("*");for(const{element:s}of e)if(i)t.set(s,null);else{const e=t.get(s);if(null===e)continue;const i=e||new Set;for(const e of n)i.add(e);t.set(s,i)}}return t}(p);if(0===y.size)return 0;const h=await async function(t){const s=[];return await async function t(o){let l;try{l=await e(o,{withFileTypes:!0})}catch{return}for(const e of l){const l=n(o,e.name);if(e.isDirectory())await t(l);else{const t=i(e.name);".profile"!==t&&".permissionset"!==t||s.push(l)}}}(t),s}(d);if(0===h.length)return 0;const C=new o(m),b=new l(f);let g=0;for(const e of h)try{const n=await t(e,"utf-8"),i=C.parse(n),o=Object.keys(i).find(e=>"Profile"===e||"PermissionSet"===e);if(!o)continue;const l=i[o];let r=!1;for(const e of a)void 0!==l[e]&&(delete l[e],r=!0);for(const[e,t]of y.entries()){if(void 0===l[e])continue;const s=u(e);if(!s)continue;if(null===t)continue;const n=Array.isArray(l[e])?l[e]:[l[e]],i=n.filter(e=>{const n=e[s];return null!=n&&t.has(String(n))});i.length!==n.length&&(r=!0,0===i.length?delete l[e]:l[e]=1===i.length?i[0]:i)}for(const e of c)y.has(e)||void 0===l[e]||(delete l[e],r=!0);if(r){const t=n.match(/^<\?xml[^?]*\?>\s*/);delete i["?xml"];const o=b.build(i).replace(/\n\s*\n/g,"\n").trimEnd()+"\n",l=t?t[0].trimEnd()+"\n"+o:o;await s(e,l,"utf-8"),g++}}catch(t){process.stderr.write(`[profileCleanup] Failed to clean ${e}: ${t.message}\n`)}return g}function u(e){for(const t of Object.values(r))for(const s of t)if(s.element===e)return s.keyChild}

package/dist/utils/retrieveStore.d.ts

@@ -0,0 +1,12 @@
+export interface RetrieveEntry {
+    retrieveId: string;
+    status: 'InProgress' | 'Succeeded' | 'Failed';
+    packageXml: string;
+    tempDir: string;
+    zipPath?: string;
+    errorMessage?: string;
+    createdAt: number;
+}
+export declare function getRetrieveEntry(retrieveId: string): RetrieveEntry | undefined;
+export declare function setRetrieveEntry(entry: RetrieveEntry): void;
+export declare function deleteRetrieveEntry(retrieveId: string): void;

package/dist/utils/retrieveStore.js

@@ -0,0 +1 @@
+const e=new Map;export function getRetrieveEntry(t){return e.get(t)}export function setRetrieveEntry(t){e.set(t.retrieveId,t)}export function deleteRetrieveEntry(t){e.delete(t)}

package/dist/utils/sfCli.d.ts

@@ -0,0 +1,18 @@
+import type { Connection } from 'jsforce';
+export interface SfCliResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    jsonOutput?: any;
+}
+export declare function resolveBaseOutputDir(): string;
+export declare function createJobDir(baseDir: string): string;
+export declare function runSfCli(args: string[], options?: {
+    timeout?: number;
+    stdin?: string;
+    env?: Record<string, string>;
+    cwd?: string;
+}): Promise<SfCliResult>;
+export declare function ensureSfCli(): Promise<void>;
+export declare function authenticateOrg(conn: Connection): Promise<string>;
+export declare function createSfdxProjectJson(dir: string): void;

package/dist/utils/sfCli.js

@@ -0,0 +1,130 @@
+import { spawn } from 'child_process';
+import { randomUUID } from 'crypto';
+import { mkdirSync, writeFileSync, accessSync, constants } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+const SF_CLI_ALIAS = 'mcp-session';
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
+export function resolveBaseOutputDir() {
+    return process.env.SALESFORCE_EXPORT_DIR || join(tmpdir(), 'salesforce-retrieve');
+}
+export function createJobDir(baseDir) {
+    const jobDir = join(baseDir, randomUUID());
+    mkdirSync(jobDir, { recursive: true });
+    // Validate writability
+    accessSync(jobDir, constants.W_OK);
+    return jobDir;
+}
+export function runSfCli(args, options) {
+    const timeout = options?.timeout ?? DEFAULT_TIMEOUT_MS;
+    const hasJson = args.includes('--json');
+    return new Promise((resolve, reject) => {
+        const child = spawn('sf', args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout,
+            env: options?.env ? { ...process.env, ...options.env } : undefined,
+            cwd: options?.cwd,
+        });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.on('data', (data) => { stdout += data.toString(); });
+        child.stderr.on('data', (data) => {
+            const chunk = data.toString();
+            stderr += chunk;
+            process.stderr.write(chunk);
+        });
+        if (options?.stdin) {
+            child.stdin.write(options.stdin);
+            child.stdin.end();
+        }
+        else {
+            child.stdin.end();
+        }
+        child.on('error', (err) => {
+            if (err.code === 'ENOENT') {
+                reject(new Error('Salesforce CLI (sf) is not installed or not on PATH. ' +
+                    'Install it from https://developer.salesforce.com/tools/salesforcecli'));
+            }
+            else {
+                reject(err);
+            }
+        });
+        child.on('close', (code) => {
+            const result = {
+                exitCode: code ?? 1,
+                stdout,
+                stderr,
+            };
+            if (hasJson && stdout.trim()) {
+                try {
+                    result.jsonOutput = JSON.parse(stdout);
+                }
+                catch { /* leave undefined */ }
+            }
+            resolve(result);
+        });
+    });
+}
+export async function ensureSfCli() {
+    return new Promise((resolve, reject) => {
+        const child = spawn('sf', ['--version'], { stdio: ['ignore', 'pipe', 'pipe'] });
+        let stderr = '';
+        child.stderr.on('data', (data) => { stderr += data.toString(); });
+        child.on('error', (err) => {
+            if (err.code === 'ENOENT') {
+                reject(new Error('Salesforce CLI (sf) is not installed or not on PATH. ' +
+                    'Install it from https://developer.salesforce.com/tools/salesforcecli'));
+            }
+            else {
+                reject(err);
+            }
+        });
+        child.on('close', (code) => {
+            if (code !== 0) {
+                reject(new Error(`sf --version failed (exit ${code}): ${stderr}`));
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+}
+const SESSION_ID_PATTERN = /^[a-zA-Z0-9]{15,18}!/;
+export async function authenticateOrg(conn) {
+    let accessToken = conn.accessToken?.trim();
+    const instanceUrl = conn.instanceUrl;
+    if (!accessToken || !instanceUrl) {
+        throw new Error('Connection missing accessToken or instanceUrl — cannot authenticate sf CLI');
+    }
+    // sf CLI requires tokens in "orgId!token" format — construct it if missing
+    if (!SESSION_ID_PATTERN.test(accessToken)) {
+        const idResult = await conn.identity();
+        const orgId = idResult?.organization_id;
+        if (!orgId) {
+            throw new Error('Access token lacks the "orgId!token" format required by sf CLI and org identity lookup failed.');
+        }
+        accessToken = `${orgId}!${accessToken}`;
+    }
+    const result = await runSfCli([
+        'org', 'login', 'access-token',
+        '--instance-url', instanceUrl,
+        '--alias', SF_CLI_ALIAS,
+        '--no-prompt',
+        '--json',
+    ], { env: { SF_ACCESS_TOKEN: accessToken } });
+    if (result.exitCode !== 0) {
+        const msg = result.jsonOutput?.message || result.stderr || 'Unknown error';
+        throw new Error(`sf org login failed (exit ${result.exitCode}): ${msg}`);
+    }
+    return SF_CLI_ALIAS;
+}
+export function createSfdxProjectJson(dir) {
+    const project = {
+        packageDirectories: [{ path: '.', default: true }],
+        namespace: '',
+        sfdcLoginUrl: 'https://login.salesforce.com',
+        sourceApiVersion: '62.0',
+    };
+    writeFileSync(join(dir, 'sfdx-project.json'), JSON.stringify(project, null, 2));
+}
+//# sourceMappingURL=sfCli.js.map

package/dist/utils/sfCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfCli.js","sourceRoot":"","sources":["../../src/utils/sfCli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAU5B,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEtD,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,uBAAuB;IACvB,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAc,EAAE,OAA0F;IACjI,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,kBAAkB,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;YAC9B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO;YACP,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,GAAG,EAAE,OAAO,EAAE,GAAG;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,KAAK,CACd,uDAAuD;oBACvD,sEAAsE,CACvE,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,MAAM,GAAgB;gBAC1B,QAAQ,EAAE,IAAI,IAAI,CAAC;gBACnB,MAAM;gBACN,MAAM;aACP,CAAC;YAEF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;YACjF,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,KAAK,CACd,uDAAuD;oBACvD,sEAAsE,CACvE,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAErC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAO,IAAY,CAAC,QAAQ,EAAkC,CAAC;QAChF,MAAM,KAAK,GAAG,QAAQ,EAAE,eAAe,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;QACpH,CAAC;QACD,WAAW,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,KAAK,EAAE,OAAO,EAAE,cAAc;QAC9B,gBAAgB,EAAE,WAAW;QAC7B,SAAS,EAAE,YAAY;QACvB,aAAa;QACb,QAAQ;KACT,EAAE,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAE9C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClD,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,8BAA8B;QAC5C,gBAAgB,EAAE,MAAM;KACzB,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC"}

package/dist/utils/tokenBroker.d.ts

@@ -0,0 +1,13 @@
+export interface OrgInfo {
+    id: string;
+    name: string;
+    environment: string;
+    instance_url: string;
+}
+export declare function getSelectedOrgId(): string | null;
+export declare function setSelectedOrgId(orgId: string): void;
+export declare function listOrgs(): Promise<OrgInfo[]>;
+export declare function getAccessToken(orgId: string): Promise<{
+    accessToken: string;
+    instanceUrl: string;
+}>;

package/dist/utils/tokenBroker.js

@@ -0,0 +1,73 @@
+// Token cache: orgId -> cached token entry
+const tokenCache = new Map();
+// Session-scoped org selection
+let selectedOrgId = null;
+export function getSelectedOrgId() {
+    return selectedOrgId;
+}
+export function setSelectedOrgId(orgId) {
+    selectedOrgId = orgId;
+}
+function getBrokerConfig() {
+    const brokerUrl = process.env.ACQUIS_BROKER_URL;
+    const apiKey = process.env.ACQUIS_API_KEY;
+    if (!brokerUrl) {
+        throw new Error('ACQUIS_BROKER_URL environment variable is required for access_token authentication');
+    }
+    if (!apiKey) {
+        throw new Error('ACQUIS_API_KEY environment variable is required for access_token authentication');
+    }
+    return { brokerUrl: brokerUrl.replace(/\/$/, ''), apiKey };
+}
+export async function listOrgs() {
+    const { brokerUrl, apiKey } = getBrokerConfig();
+    const response = await fetch(`${brokerUrl}/api/v1/orgs`, {
+        headers: { Authorization: `Bearer ${apiKey}` },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to list orgs (${response.status}): ${errorText}`);
+    }
+    const body = await response.json();
+    // Log raw shape to stderr for debugging (stdout is reserved for MCP JSON-RPC)
+    process.stderr.write(`[tokenBroker] listOrgs raw response: ${JSON.stringify(body)}\n`);
+    // Handle plain array
+    if (Array.isArray(body))
+        return body;
+    // Handle common wrapper shapes: { orgs: [] }, { data: [] }, { results: [] }, { items: [] }
+    for (const key of ['orgs', 'data', 'results', 'items']) {
+        if (Array.isArray(body[key]))
+            return body[key];
+    }
+    throw new Error(`Unexpected response shape from GET /api/v1/orgs. ` +
+        `Expected an array or a wrapped array. Got: ${JSON.stringify(body)}`);
+}
+export async function getAccessToken(orgId) {
+    const now = Date.now();
+    const cached = tokenCache.get(orgId);
+    if (cached && cached.expiresAt > now) {
+        return { accessToken: cached.accessToken, instanceUrl: cached.instanceUrl };
+    }
+    const { brokerUrl, apiKey } = getBrokerConfig();
+    const response = await fetch(`${brokerUrl}/api/v1/orgs/${encodeURIComponent(orgId)}/token`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${apiKey}` },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to get access token for org "${orgId}" (${response.status}): ${errorText}`);
+    }
+    const data = await response.json();
+    if (!data.access_token || !data.instance_url) {
+        throw new Error(`Token broker returned an invalid response for org "${orgId}": missing access_token or instance_url`);
+    }
+    // Cache with a 60-second safety buffer before actual expiry
+    const expiresAt = now + (data.expires_in - 60) * 1000;
+    tokenCache.set(orgId, {
+        accessToken: data.access_token,
+        instanceUrl: data.instance_url,
+        expiresAt,
+    });
+    return { accessToken: data.access_token, instanceUrl: data.instance_url };
+}
+//# sourceMappingURL=tokenBroker.js.map

package/dist/utils/tokenBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenBroker.js","sourceRoot":"","sources":["../../src/utils/tokenBroker.ts"],"names":[],"mappings":"AAoBA,2CAA2C;AAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;AAElD,+BAA+B;AAC/B,IAAI,aAAa,GAAkB,IAAI,CAAC;AAExC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,cAAc,EAAE;QACvD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvF,qBAAqB;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAiB,CAAC;IAElD,2FAA2F;IAC3F,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,OAAO,CAAE,IAAY,CAAC,GAAG,CAAC,CAAC;YAAE,OAAQ,IAAY,CAAC,GAAG,CAAc,CAAC;IAChF,CAAC;IAED,MAAM,IAAI,KAAK,CACb,mDAAmD;QACnD,8CAA8C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAErC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC1F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,MAAM,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAmB,CAAC;IAEpD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,yCAAyC,CAAC,CAAC;IACxH,CAAC;IAED,4DAA4D;IAC5D,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IACtD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE;QACpB,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;AAC5E,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@acquis-consulting/asm",
+  "version": "1.0.5",
+  "description": "aha",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "salesforce-connector": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "modryvlk"
+  ],
+  "author": "mkona-acquis",
+  "scripts": {
+    "build": "tsc && shx chmod +x dist/*.js && vite build",
+    "build:ui": "vite build",
+    "test": "node --test 'test/**/*.test.js'",
+    "watch": "tsc --watch",
+    "watch:ui": "vite build --watch",
+    "prepare": "npm run build",
+    "obfuscate": "node scripts/obfuscate.js",
+    "build:publish": "npm run build && npm run obfuscate",
+    "publish:npm": "npm run build:publish && npm publish --access public",
+    "dxt": "cd claude_desktop && dxt pack"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/ext-apps": "^1.2.2",
+    "@modelcontextprotocol/sdk": "1.26.0",
+    "dotenv": "16.4.7",
+    "gitdiff-parser": "^0.3.1",
+    "jsforce": "^3.10.3",
+    "zod": "^4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^5.1.4",
+    "cross-env": "^10.1.0",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "shx": "^0.3.4",
+    "terser": "^5.46.1",
+    "typescript": "^5.3.0",
+    "vite": "^7.3.1",
+    "vite-plugin-singlefile": "^2.3.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}