@oomol-lab/open-connector 1.9.0 → 1.9.1

package/src/providers/registry.generated.js

@@ -27,6 +27,7 @@ export const executorModules = {
     affinity: () => import("./affinity/executors.js"),
     aftership: () => import("./aftership/executors.js"),
     agent_mail: () => import("./agent_mail/executors.js"),
+    agentearth: () => import("./agentearth/executors.js"),
     agentql: () => import("./agentql/executors.js"),
     agenty: () => import("./agenty/executors.js"),
     agiled: () => import("./agiled/executors.js"),
@@ -90,6 +91,7 @@ export const executorModules = {
     appcircle: () => import("./appcircle/executors.js"),
     appcues: () => import("./appcues/executors.js"),
     appdrag: () => import("./appdrag/executors.js"),
+    appgrowing_mcp: () => import("./appgrowing_mcp/executors.js"),
     apple_ads: () => import("./apple_ads/executors.js"),
     apple_maps: () => import("./apple_maps/executors.js"),
     apple_notary: () => import("./apple_notary/executors.js"),
@@ -97,6 +99,7 @@ export const executorModules = {
     appstle_subscriptions: () => import("./appstle_subscriptions/executors.js"),
     appveyor: () => import("./appveyor/executors.js"),
     arcgis_online: () => import("./arcgis_online/executors.js"),
+    arcmira: () => import("./arcmira/executors.js"),
     aroflo: () => import("./aroflo/executors.js"),
     arxiv: () => import("./arxiv/executors.js"),
     asana: () => import("./asana/executors.js"),
@@ -121,6 +124,7 @@ export const executorModules = {
     ayrshare: () => import("./ayrshare/executors.js"),
     baidu_maps: () => import("./baidu_maps/executors.js"),
     baidu_netdisk: () => import("./baidu_netdisk/executors.js"),
+    bainiu: () => import("./bainiu/executors.js"),
     baixiao: () => import("./baixiao/executors.js"),
     baizhi_mcp: () => import("./baizhi_mcp/executors.js"),
     balldontlie_worldcup: () => import("./balldontlie_worldcup/executors.js"),
@@ -229,6 +233,7 @@ export const executorModules = {
     central_station_crm: () => import("./central_station_crm/executors.js"),
     certifier: () => import("./certifier/executors.js"),
     certn: () => import("./certn/executors.js"),
+    chaport: () => import("./chaport/executors.js"),
     chargebee: () => import("./chargebee/executors.js"),
     chargeblast: () => import("./chargeblast/executors.js"),
     chargify: () => import("./chargify/executors.js"),
@@ -278,6 +283,7 @@ export const executorModules = {
     cloudflare_worker: () => import("./cloudflare_worker/executors.js"),
     cloudinary: () => import("./cloudinary/executors.js"),
     cloudlayer: () => import("./cloudlayer/executors.js"),
+    cnb: () => import("./cnb/executors.js"),
     cochrane: () => import("./cochrane/executors.js"),
     cockroach_labs: () => import("./cockroach_labs/executors.js"),
     coda: () => import("./coda/executors.js"),
@@ -330,6 +336,7 @@ export const executorModules = {
     cronlytic: () => import("./cronlytic/executors.js"),
     crossref: () => import("./crossref/executors.js"),
     crowdin: () => import("./crowdin/executors.js"),
+    crtsh: () => import("./crtsh/executors.js"),
     crunchbase: () => import("./crunchbase/executors.js"),
     crustdata: () => import("./crustdata/executors.js"),
     crypto_apis: () => import("./crypto_apis/executors.js"),
@@ -426,6 +433,7 @@ export const executorModules = {
     dynatrace: () => import("./dynatrace/executors.js"),
     e2b: () => import("./e2b/executors.js"),
     eagle_doc: () => import("./eagle_doc/executors.js"),
+    eastmoney_miaoxiang: () => import("./eastmoney_miaoxiang/executors.js"),
     easy_peasy_ai: () => import("./easy_peasy_ai/executors.js"),
     easy8: () => import("./easy8/executors.js"),
     easypost: () => import("./easypost/executors.js"),
@@ -536,12 +544,14 @@ export const executorModules = {
     freshstatus: () => import("./freshstatus/executors.js"),
     freshteam: () => import("./freshteam/executors.js"),
     front: () => import("./front/executors.js"),
+    ftshare: () => import("./ftshare/executors.js"),
     full_contact: () => import("./full_contact/executors.js"),
     fullenrich: () => import("./fullenrich/executors.js"),
     fundzwatch: () => import("./fundzwatch/executors.js"),
     "fusion-api": () => import("./fusion-api/executors.js"),
     futunn: () => import("./futunn/executors.js"),
     fuxin: () => import("./fuxin/executors.js"),
+    fxbaogao: () => import("./fxbaogao/executors.js"),
     fxmacrodata: () => import("./fxmacrodata/executors.js"),
     gagelist: () => import("./gagelist/executors.js"),
     gainsight_nxt: () => import("./gainsight_nxt/executors.js"),
@@ -662,6 +672,7 @@ export const executorModules = {
     hotjar: () => import("./hotjar/executors.js"),
     hotspotsystem: () => import("./hotspotsystem/executors.js"),
     hr_partner: () => import("./hr_partner/executors.js"),
+    hrmos_kintai: () => import("./hrmos_kintai/executors.js"),
     html_to_image: () => import("./html_to_image/executors.js"),
     htmlcsstoimage: () => import("./htmlcsstoimage/executors.js"),
     httpsms: () => import("./httpsms/executors.js"),
@@ -670,6 +681,7 @@ export const executorModules = {
     huggingface: () => import("./huggingface/executors.js"),
     humaans: () => import("./humaans/executors.js"),
     humanitix: () => import("./humanitix/executors.js"),
+    humor_api: () => import("./humor_api/executors.js"),
     hunter: () => import("./hunter/executors.js"),
     huodingdong_mcp: () => import("./huodingdong_mcp/executors.js"),
     hybrid_analysis: () => import("./hybrid_analysis/executors.js"),
@@ -738,6 +750,7 @@ export const executorModules = {
     kagi: () => import("./kagi/executors.js"),
     kaleido: () => import("./kaleido/executors.js"),
     kandji: () => import("./kandji/executors.js"),
+    kaonavi: () => import("./kaonavi/executors.js"),
     karakeep: () => import("./karakeep/executors.js"),
     keen_io: () => import("./keen_io/executors.js"),
     keepa: () => import("./keepa/executors.js"),
@@ -811,6 +824,7 @@ export const executorModules = {
     linkup: () => import("./linkup/executors.js"),
     linux_do: () => import("./linux_do/executors.js"),
     listennotes: () => import("./listennotes/executors.js"),
+    listinggood: () => import("./listinggood/executors.js"),
     listmonk: () => import("./listmonk/executors.js"),
     litellm: () => import("./litellm/executors.js"),
     liveagent: () => import("./liveagent/executors.js"),
@@ -1092,6 +1106,7 @@ export const executorModules = {
     polar: () => import("./polar/executors.js"),
     polygon_io: () => import("./polygon_io/executors.js"),
     poper: () => import("./poper/executors.js"),
+    porteden: () => import("./porteden/executors.js"),
     positionstack: () => import("./positionstack/executors.js"),
     postalytics: () => import("./postalytics/executors.js"),
     postgrid: () => import("./postgrid/executors.js"),
@@ -1134,8 +1149,10 @@ export const executorModules = {
     qianfan: () => import("./qianfan/executors.js"),
     qichacha: () => import("./qichacha/executors.js"),
     qingflow: () => import("./qingflow/executors.js"),
+    qiuxiaoce: () => import("./qiuxiaoce/executors.js"),
     qlty: () => import("./qlty/executors.js"),
     qq_mail: () => import("./qq_mail/executors.js"),
+    qqmusic: () => import("./qqmusic/executors.js"),
     quaderno: () => import("./quaderno/executors.js"),
     quant_data: () => import("./quant_data/executors.js"),
     quentn: () => import("./quentn/executors.js"),
@@ -1152,6 +1169,7 @@ export const executorModules = {
     railway: () => import("./railway/executors.js"),
     raindrop: () => import("./raindrop/executors.js"),
     raisely: () => import("./raisely/executors.js"),
+    rakuraku_seisan: () => import("./rakuraku_seisan/executors.js"),
     rawg: () => import("./rawg/executors.js"),
     raygun: () => import("./raygun/executors.js"),
     razorpay: () => import("./razorpay/executors.js"),
@@ -1211,10 +1229,12 @@ export const executorModules = {
     sage_hr: () => import("./sage_hr/executors.js"),
     sage_sales_management: () => import("./sage_sales_management/executors.js"),
     salesflare: () => import("./salesflare/executors.js"),
+    salesforce: () => import("./salesforce/executors.js"),
     salesloft: () => import("./salesloft/executors.js"),
     salesmate: () => import("./salesmate/executors.js"),
     samcart: () => import("./samcart/executors.js"),
     sanity: () => import("./sanity/executors.js"),
+    sansan: () => import("./sansan/executors.js"),
     satismeter: () => import("./satismeter/executors.js"),
     saucelabs: () => import("./saucelabs/executors.js"),
     scanmalware: () => import("./scanmalware/executors.js"),
@@ -1301,10 +1321,12 @@ export const executorModules = {
     slicktext: () => import("./slicktext/executors.js"),
     sling: () => import("./sling/executors.js"),
     slite: () => import("./slite/executors.js"),
+    smarthr: () => import("./smarthr/executors.js"),
     smartlead_ai: () => import("./smartlead_ai/executors.js"),
     smartrecruiters: () => import("./smartrecruiters/executors.js"),
     smartsheet: () => import("./smartsheet/executors.js"),
     smartsuite: () => import("./smartsuite/executors.js"),
+    smooth: () => import("./smooth/executors.js"),
     sms_alert: () => import("./sms_alert/executors.js"),
     smtp2go: () => import("./smtp2go/executors.js"),
     smugmug: () => import("./smugmug/executors.js"),
@@ -1378,6 +1400,7 @@ export const executorModules = {
     talentlms: () => import("./talentlms/executors.js"),
     tally: () => import("./tally/executors.js"),
     tanium: () => import("./tanium/executors.js"),
+    tapd: () => import("./tapd/executors.js"),
     tapfiliate: () => import("./tapfiliate/executors.js"),
     tave: () => import("./tave/executors.js"),
     tavily: () => import("./tavily/executors.js"),
@@ -1394,6 +1417,7 @@ export const executorModules = {
     templatefox: () => import("./templatefox/executors.js"),
     tencent_docs: () => import("./tencent_docs/executors.js"),
     tencent_maps: () => import("./tencent_maps/executors.js"),
+    tencent_meeting_mcp: () => import("./tencent_meeting_mcp/executors.js"),
     terminus_app: () => import("./terminus_app/executors.js"),
     terraform: () => import("./terraform/executors.js"),
     textcortex: () => import("./textcortex/executors.js"),
@@ -1410,6 +1434,7 @@ export const executorModules = {
     thehive5: () => import("./thehive5/executors.js"),
     theirstack: () => import("./theirstack/executors.js"),
     thesportsdb: () => import("./thesportsdb/executors.js"),
+    threatfox: () => import("./threatfox/executors.js"),
     tianapi: () => import("./tianapi/executors.js"),
     tianyancha: () => import("./tianyancha/executors.js"),
     tick: () => import("./tick/executors.js"),
@@ -1443,6 +1468,7 @@ export const executorModules = {
     torii_image_translator: () => import("./torii_image_translator/executors.js"),
     totp: () => import("./totp/executors.js"),
     tpscheck: () => import("./tpscheck/executors.js"),
+    tradebee: () => import("./tradebee/executors.js"),
     trawlingweb: () => import("./trawlingweb/executors.js"),
     trello: () => import("./trello/executors.js"),
     tremendous: () => import("./tremendous/executors.js"),
@@ -1463,6 +1489,7 @@ export const executorModules = {
     twilio: () => import("./twilio/executors.js"),
     twitter: () => import("./twitter/executors.js"),
     twitterapi_io: () => import("./twitterapi_io/executors.js"),
+    twittrapi: () => import("./twittrapi/executors.js"),
     twochat: () => import("./twochat/executors.js"),
     typebot: () => import("./typebot/executors.js"),
     typeform: () => import("./typeform/executors.js"),
@@ -1483,6 +1510,7 @@ export const executorModules = {
     upsales: () => import("./upsales/executors.js"),
     upstash_redis: () => import("./upstash_redis/executors.js"),
     uptimerobot: () => import("./uptimerobot/executors.js"),
+    urlhaus: () => import("./urlhaus/executors.js"),
     urlscan: () => import("./urlscan/executors.js"),
     userflow: () => import("./userflow/executors.js"),
     userlist: () => import("./userlist/executors.js"),
@@ -1548,6 +1576,7 @@ export const executorModules = {
     weixin_official_account: () => import("./weixin_official_account/executors.js"),
     weixin_store: () => import("./weixin_store/executors.js"),
     wejam_ai: () => import("./wejam_ai/executors.js"),
+    weread: () => import("./weread/executors.js"),
     what3words: () => import("./what3words/executors.js"),
     whatsable: () => import("./whatsable/executors.js"),
     whatsapp: () => import("./whatsapp/executors.js"),
@@ -1609,6 +1638,7 @@ export const executorModules = {
     zerobounce: () => import("./zerobounce/executors.js"),
     zerotier: () => import("./zerotier/executors.js"),
     zhihu: () => import("./zhihu/executors.js"),
+    zhiliaobiaoxun: () => import("./zhiliaobiaoxun/executors.js"),
     zigpoll: () => import("./zigpoll/executors.js"),
     zip_archive_api: () => import("./zip_archive_api/executors.js"),
     zipcodebase: () => import("./zipcodebase/executors.js"),

package/src/providers/salesforce/context.d.ts

@@ -0,0 +1,16 @@
+import type { OAuthProviderContext } from "../provider-runtime.ts";
+export interface SalesforceContext extends OAuthProviderContext {
+    base: string;
+    version: string;
+    origin: string;
+    request(path: string, method?: string, body?: unknown): Promise<unknown>;
+    object(path: string, method?: string, body?: unknown): Promise<Record<string, unknown>>;
+    items(path: string, method?: string, body?: unknown): Promise<{
+        results: unknown[];
+    }>;
+    response<T>(path: string, init: RequestInit, consume: (response: Response, signal: AbortSignal) => Promise<T>): Promise<T>;
+}
+export declare function createSalesforceContext(context: OAuthProviderContext, data: Record<string, unknown>): SalesforceContext;
+export type SalesforceHandler = (data: Record<string, unknown>, context: SalesforceContext) => Promise<unknown>;
+export declare function segment(value: unknown): string;
+export declare function queryPath(path: string, params: Record<string, unknown>): string;

package/src/providers/salesforce/context.js

@@ -0,0 +1,58 @@
+import { requiredRawString } from "../../core/cast.js";
+import { providerInputError, providerResponseError, requiredInputString, requiredResponseRecord, } from "../provider-runtime.js";
+import { salesforceFileRequestTimeoutMs, salesforceOrigin, salesforceRequest, withSalesforceResponse, } from "./transport.js";
+export function createSalesforceContext(context, data) {
+    const origin = salesforceOrigin(requiredInputString(context.providerSecret?.instanceUrl, "instanceUrl"), "instanceUrl");
+    const version = String(data.apiVersion ?? "66.0");
+    const base = `/services/data/v${version}`;
+    function url(path) {
+        const resolved = new URL(path, origin);
+        if (resolved.origin !== origin || !path.startsWith("/services/"))
+            throw providerInputError("Salesforce path must stay within the connected instance");
+        return resolved;
+    }
+    function initWithAuth(init) {
+        const headers = new Headers(init.headers);
+        headers.set("authorization", `Bearer ${context.accessToken}`);
+        return { ...init, headers };
+    }
+    async function request(path, method = "GET", body) {
+        return (await salesforceRequest(url(path), initWithAuth({
+            method,
+            headers: body === undefined ? undefined : { "content-type": "application/json" },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        }), context.fetcher, context.signal)).body;
+    }
+    return {
+        ...context,
+        base,
+        version,
+        origin,
+        request,
+        async object(path, method = "GET", body) {
+            return requiredResponseRecord(await request(path, method, body), "Salesforce response");
+        },
+        async items(path, method = "GET", body) {
+            const results = await request(path, method, body);
+            if (!Array.isArray(results))
+                throw providerResponseError("Salesforce results must be an array");
+            return { results };
+        },
+        response(path, init, consume) {
+            return withSalesforceResponse(url(path), initWithAuth(init), context.fetcher, consume, salesforceFileRequestTimeoutMs, context.signal);
+        },
+    };
+}
+export function segment(value) {
+    const raw = requiredRawString(value, "path segment", providerInputError);
+    if (!raw || raw === "." || raw === "..")
+        throw providerInputError("Salesforce path cannot contain dot segments");
+    return encodeURIComponent(raw);
+}
+export function queryPath(path, params) {
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(params))
+        if (value !== undefined)
+            search.set(key, Array.isArray(value) ? value.join(",") : String(value));
+    return search.size ? `${path}?${search}` : path;
+}

package/src/providers/salesforce/executors.d.ts

@@ -0,0 +1,5 @@
+import type { CredentialValidators, ProviderExecutors, ProviderProxyExecutor } from "../../core/types.ts";
+export { oauth } from "./oauth.ts";
+export declare const executors: ProviderExecutors;
+export declare const proxy: ProviderProxyExecutor;
+export declare const credentialValidators: CredentialValidators;

package/src/providers/salesforce/executors.js

@@ -0,0 +1,54 @@
+import { optionalString } from "../../core/cast.js";
+import { defineOAuthProviderExecutors, defineProviderProxy, providerInputError, providerResponseError, requiredInputString, requiredResponseRecord, } from "../provider-runtime.js";
+import { createSalesforceContext } from "./context.js";
+import { salesforceAnalyticsHandlers } from "./runtime-analytics.js";
+import { salesforceAutomationHandlers } from "./runtime-automation.js";
+import { salesforceBaseHandlers } from "./runtime-base.js";
+import { salesforceBulkHandlers } from "./runtime-bulk.js";
+import { salesforceDataHandlers } from "./runtime-data.js";
+import { salesforceFileHandlers } from "./runtime-files.js";
+import { readSalesforceError, salesforceOrigin, salesforceRequest } from "./transport.js";
+export { oauth } from "./oauth.js";
+const handlers = {};
+for (const [name, handler] of Object.entries({
+    ...salesforceBaseHandlers,
+    ...salesforceDataHandlers,
+    ...salesforceAnalyticsHandlers,
+    ...salesforceAutomationHandlers,
+    ...salesforceFileHandlers,
+    ...salesforceBulkHandlers,
+})) {
+    handlers[name] = (input, context) => handler(input, createSalesforceContext(context, input));
+}
+export const executors = defineOAuthProviderExecutors("salesforce", handlers);
+export const proxy = defineProviderProxy({
+    service: "salesforce",
+    async baseUrl(context, service) {
+        const credential = await context.getCredential(service);
+        if (credential?.authType !== "oauth2")
+            throw providerInputError("Salesforce requires OAuth2");
+        return salesforceOrigin(requiredInputString(credential.providerSecret?.instanceUrl, "instanceUrl"), "instanceUrl");
+    },
+    auth: { type: "oauth_bearer" },
+    readError: readSalesforceError,
+});
+export const credentialValidators = {
+    async oauth2(credential, { fetcher, signal }) {
+        const metadata = credential.providerSecret;
+        if (!metadata)
+            throw providerInputError("Salesforce connection metadata is missing");
+        const url = new URL(requiredInputString(metadata?.identityUrl, "identityUrl"));
+        salesforceOrigin(url.origin, "identityUrl");
+        const body = requiredResponseRecord((await salesforceRequest(url, { headers: { authorization: `Bearer ${credential.accessToken}` } }, fetcher, signal)).body, "Salesforce identity");
+        if (body.organization_id !== metadata?.organizationId || body.user_id !== metadata?.userId)
+            throw providerResponseError("Salesforce identity does not match the token response");
+        return {
+            profile: {
+                accountId: `${metadata.organizationId}:${metadata.userId}`,
+                displayName: optionalString(body.display_name) ?? optionalString(body.username),
+            },
+            metadata: { instanceUrl: metadata.instanceUrl },
+            grantedScopes: optionalString(credential.metadata.scope)?.split(" ").filter(Boolean),
+        };
+    },
+};

package/src/providers/salesforce/media.d.ts

@@ -0,0 +1,9 @@
+import type { TransitFileUpload, TransitFileWriter } from "../../core/types.ts";
+import type { SalesforceContext } from "./context.ts";
+export declare function requireSalesforceTransit(context: SalesforceContext): TransitFileWriter;
+export declare function downloadSalesforceSource(fileUrl: string, maximumBytes: number, context: SalesforceContext): Promise<{
+    body: ReadableStream<Uint8Array>;
+    sizeBytes: number;
+    cleanup(): Promise<void>;
+}>;
+export declare function saveSalesforceDownload(context: SalesforceContext, response: Response, name: string, mimeType: string, signal: AbortSignal): Promise<TransitFileUpload>;

package/src/providers/salesforce/media.js

@@ -0,0 +1,66 @@
+import { assertPublicHttpUrl, storeResponseInTransit } from "../../core/request.js";
+import { providerFetch, providerInputError, providerResponseError, ProviderRequestError, runProviderRequest, } from "../provider-runtime.js";
+import { salesforceFileRequestTimeoutMs } from "./transport.js";
+export function requireSalesforceTransit(context) {
+    const store = context.transitFiles;
+    if (!store?.createFromStream)
+        throw providerInputError("Salesforce file transfers require a streaming transit file backend (filesystem).");
+    return store;
+}
+export async function downloadSalesforceSource(fileUrl, maximumBytes, context) {
+    const store = requireSalesforceTransit(context);
+    if (!store.response)
+        throw providerInputError("Salesforce uploads require a transit backend with streaming reads.");
+    const url = assertPublicHttpUrl(fileUrl, { fieldName: "fileUrl", createError: providerInputError });
+    if (url.protocol !== "https:")
+        throw providerInputError("fileUrl must use HTTPS");
+    return runProviderRequest({ label: "Salesforce file source", timeoutMs: salesforceFileRequestTimeoutMs, signal: context.signal }, async (signal) => {
+        const response = await providerFetch(url, { signal });
+        if (!response.ok || !response.body) {
+            await response.body?.cancel();
+            throw new ProviderRequestError(response.status, `File source returned HTTP ${response.status}`, undefined, "provider_error");
+        }
+        const file = await storeResponseInTransit(response, store, {
+            name: "source",
+            mimeType: "application/octet-stream",
+            fieldName: "Salesforce file source",
+            createError: (message) => new ProviderRequestError(413, message),
+            maxBytes: maximumBytes,
+            signal,
+        });
+        let body = null;
+        try {
+            if (!file.sizeBytes)
+                throw providerInputError("The file source is empty");
+            const source = await store.response(file.fileId);
+            body = source.body;
+            if (!source.ok || !body)
+                throw providerResponseError("Salesforce transit source could not be read");
+            const sourceBody = body;
+            return {
+                body: sourceBody,
+                sizeBytes: file.sizeBytes,
+                async cleanup() {
+                    await sourceBody.cancel().catch(() => undefined);
+                    await store.delete(file.fileId);
+                },
+            };
+        }
+        catch (error) {
+            await body?.cancel().catch(() => undefined);
+            await store.delete(file.fileId);
+            throw error;
+        }
+    });
+}
+export async function saveSalesforceDownload(context, response, name, mimeType, signal) {
+    const store = requireSalesforceTransit(context);
+    return storeResponseInTransit(response, store, {
+        name,
+        mimeType,
+        signal,
+        maxBytes: 2 * 1024 ** 3,
+        fieldName: "Salesforce file",
+        createError: (message) => new ProviderRequestError(413, message),
+    });
+}

package/src/providers/salesforce/oauth.d.ts

@@ -0,0 +1,2 @@
+import type { ProviderOAuthRuntime } from "../../oauth/oauth-token.ts";
+export declare const oauth: ProviderOAuthRuntime;

package/src/providers/salesforce/oauth.js

@@ -0,0 +1,89 @@
+import { optionalNumber, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
+import { ProviderRequestError, providerResponseError, requiredResponseRecord } from "../provider-runtime.js";
+import { salesforceOrigin, salesforceRequest } from "./transport.js";
+function loginOrigin(config) {
+    return salesforceOrigin(optionalString(config.extra.loginUrl) ?? "https://login.salesforce.com", "loginUrl");
+}
+async function requestToken(input) {
+    const origin = loginOrigin(input.config);
+    const result = await salesforceRequest(new URL("/services/oauth2/token", origin), {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            ...input.parameters,
+            client_id: input.config.clientId,
+            client_secret: input.config.clientSecret,
+        }),
+    }, input.fetcher, input.signal).catch((error) => {
+        if (!(error instanceof ProviderRequestError))
+            throw error;
+        const details = optionalRecord(error.details);
+        // Only Salesforce's explicit expired-refresh-token response warrants reconnecting.
+        const expired = input.parameters.grant_type === "refresh_token" &&
+            details?.errorCode === "invalid_grant" &&
+            details.errorDescription === "expired access/refresh token";
+        throw input.createError(error.message, expired ? { status: error.status, errorCode: "invalid_grant" } : undefined);
+    });
+    const body = requiredResponseRecord(result.body, "Salesforce token response");
+    const instanceUrl = salesforceOrigin(requiredString(body.instance_url, "Salesforce instance_url", providerResponseError), "instance_url");
+    const identityUrl = new URL(requiredString(body.id, "Salesforce identity URL", providerResponseError));
+    salesforceOrigin(identityUrl.origin, "identity URL");
+    const parts = identityUrl.pathname.split("/");
+    if (parts.length !== 4 ||
+        parts[1] !== "id" ||
+        !parts[2] ||
+        !parts[3] ||
+        identityUrl.search ||
+        identityUrl.hash ||
+        identityUrl.username ||
+        identityUrl.password)
+        throw providerResponseError("Salesforce returned an invalid identity URL");
+    const scope = optionalString(body.scope) ?? input.fallbackScopes;
+    if (!scope.split(" ").includes("api"))
+        throw providerResponseError("Salesforce did not grant the required api scope");
+    const expiresIn = optionalNumber(body.expires_in);
+    // Salesforce normally omits expires_in; ten minutes is a local refresh budget, not its session lifetime.
+    const refreshAfterSeconds = expiresIn !== undefined && expiresIn > 0 ? Math.min(expiresIn, 600) : 600;
+    return {
+        accessToken: requiredString(body.access_token, "Salesforce access token", providerResponseError),
+        refreshToken: input.parameters.grant_type === "authorization_code"
+            ? requiredString(body.refresh_token, "Salesforce refresh token; enable refresh_token scope and authorize again", input.createError)
+            : optionalString(body.refresh_token),
+        tokenType: optionalString(body.token_type) ?? "Bearer",
+        expiresAt: new Date(Date.now() + refreshAfterSeconds * 1000).toISOString(),
+        providerSecret: { instanceUrl, identityUrl: identityUrl.toString(), organizationId: parts[2], userId: parts[3] },
+        metadata: { scope },
+    };
+}
+export const oauth = {
+    buildAuthorizationUrl({ authorizationUrl, clientConfig }) {
+        const url = new URL("/services/oauth2/authorize", loginOrigin(clientConfig));
+        url.search = authorizationUrl.search;
+        return url.toString();
+    },
+    exchangeCode(input) {
+        const parameters = {
+            grant_type: "authorization_code",
+            code: input.code,
+            redirect_uri: input.redirectUri,
+            code_verifier: requiredString(input.codeVerifier, "Salesforce PKCE verifier", input.createError),
+        };
+        return requestToken({
+            config: input.clientConfig,
+            parameters,
+            fetcher: input.fetcher,
+            signal: input.signal,
+            fallbackScopes: "api refresh_token",
+            createError: input.createError,
+        });
+    },
+    refreshAccessToken(input) {
+        return requestToken({
+            config: input.clientConfig,
+            parameters: { grant_type: "refresh_token", refresh_token: input.refreshToken },
+            fetcher: input.fetcher,
+            fallbackScopes: optionalString(input.metadata.scope) ?? "api refresh_token",
+            createError: input.createError,
+        });
+    },
+};

package/src/providers/salesforce/runtime-analytics.d.ts

@@ -0,0 +1,2 @@
+import type { SalesforceHandler } from "./context.ts";
+export declare const salesforceAnalyticsHandlers: Record<string, SalesforceHandler>;

package/src/providers/salesforce/runtime-analytics.js

@@ -0,0 +1,60 @@
+import { recordOrEmpty, requiredString } from "../../core/cast.js";
+import { providerResponseError } from "../provider-runtime.js";
+import { queryPath, segment } from "./context.js";
+function reportPath(d, base) {
+    return queryPath(`${base}/analytics/reports/${segment(d.reportId)}`, {
+        includeDetails: d.includeDetails,
+    });
+}
+function dashboardPath(d, base, suffix = "") {
+    return queryPath(`${base}/analytics/dashboards/${segment(d.dashboardId)}${suffix}`, {
+        runningUser: d.runningUser,
+        filter1: d.filter1,
+        filter2: d.filter2,
+        filter3: d.filter3,
+    });
+}
+export const salesforceAnalyticsHandlers = {
+    async list_reports(_d, c) {
+        return c.items(`${c.base}/analytics/reports`);
+    },
+    async describe_report(d, c) {
+        return c.object(`${c.base}/analytics/reports/${segment(d.reportId)}/describe`);
+    },
+    async run_report(d, c) {
+        return c.object(reportPath(d, c.base), d.metadata === undefined ? "GET" : "POST", d.metadata === undefined ? undefined : { reportMetadata: d.metadata });
+    },
+    async submit_report(d, c) {
+        const response = await c.object(queryPath(`${c.base}/analytics/reports/${segment(d.reportId)}/instances`, {
+            includeDetails: d.includeDetails,
+        }), "POST", d.metadata === undefined ? undefined : { reportMetadata: d.metadata });
+        // Submit responses put instance fields at the root; result responses use attributes.
+        const handle = {
+            reportId: d.reportId,
+            instanceId: requiredString(response.id, "report instance ID", providerResponseError),
+            apiVersion: c.version,
+        };
+        return { handle, state: requiredString(response.status, "report state", providerResponseError) };
+    },
+    async get_report_result(d, c) {
+        const handle = recordOrEmpty(d.handle);
+        const report = await c.object(`/services/data/v${segment(handle.apiVersion)}/analytics/reports/${segment(handle.reportId)}/instances/${segment(handle.instanceId)}`);
+        return {
+            handle,
+            state: requiredString(recordOrEmpty(report.attributes).status, "report state", providerResponseError),
+            report,
+        };
+    },
+    async list_dashboards(_d, c) {
+        return c.items(`${c.base}/analytics/dashboards`);
+    },
+    async get_dashboard(d, c) {
+        return c.object(dashboardPath(d, c.base));
+    },
+    async refresh_dashboard(d, c) {
+        return c.object(dashboardPath(d, c.base), "PUT");
+    },
+    async get_dashboard_status(d, c) {
+        return c.object(dashboardPath(d, c.base, "/status"));
+    },
+};

package/src/providers/salesforce/runtime-automation.d.ts

@@ -0,0 +1,2 @@
+import type { SalesforceHandler } from "./context.ts";
+export declare const salesforceAutomationHandlers: Record<string, SalesforceHandler>;