@party-stack/salesforce-ontology 0.4.0 → 0.4.2

package/lib/connection.js

@@ -1,314 +1,258 @@
-import { withHttpAuthenticationErrorHandling, withHttpRetryHandling, } from "@party-stack/connections";
+import { withHttpAuthenticationErrorHandling, withHttpRetryHandling } from "@party-stack/connections";
 import { unauthenticated } from "@party-stack/errors";
-import { createClientCredentialsOAuthClient, createPublicOAuthClient, } from "@party-stack/oauth";
-import { createSalesforceClient, } from "@party-stack/salesforce-client";
-const DEFAULT_SCOPES = ["api", "refresh_token", "openid"];
+import { createClientCredentialsOAuthClient, createPublicOAuthClient } from "@party-stack/oauth";
+import { createSalesforceClient } from "@party-stack/salesforce-client";
+//#region src/connection.ts
+const DEFAULT_SCOPES = [
+	"api",
+	"refresh_token",
+	"openid"
+];
 function normalizeUrl(value) {
-    return value.replace(/\/+$/, "");
+	return value.replace(/\/+$/, "");
 }
 function activeState(expiresAt, refreshable) {
-    return expiresAt === undefined
-        ? { status: "active" }
-        : {
-            status: "active",
-            expiration: {
-                expiresAt,
-                refreshable,
-            },
-        };
+	return expiresAt === void 0 ? { status: "active" } : {
+		status: "active",
+		expiration: {
+			expiresAt,
+			refreshable
+		}
+	};
 }
 async function resolveSalesforceUserId(options) {
-    const response = await options.fetch(`${options.loginUrl}/services/oauth2/userinfo`, {
-        headers: {
-            Authorization: `Bearer ${options.token}`,
-            Accept: "application/json",
-        },
-    });
-    if (response.status === 401) {
-        throw unauthenticated("Salesforce access token is invalid or expired.");
-    }
-    if (!response.ok) {
-        throw new Error(`Salesforce userinfo failed with status ${response.status}: ${await response.text()}`);
-    }
-    const user = (await response.json());
-    const userId = user.user_id ?? user.sub;
-    if (!userId) {
-        throw new Error("Salesforce userinfo did not return user_id or sub.");
-    }
-    return userId;
+	const response = await options.fetch(`${options.loginUrl}/services/oauth2/userinfo`, { headers: {
+		Authorization: `Bearer ${options.token}`,
+		Accept: "application/json"
+	} });
+	if (response.status === 401) throw unauthenticated("Salesforce access token is invalid or expired.");
+	if (!response.ok) throw new Error(`Salesforce userinfo failed with status ${response.status}: ${await response.text()}`);
+	const user = await response.json();
+	const userId = user.user_id ?? user.sub;
+	if (!userId) throw new Error("Salesforce userinfo did not return user_id or sub.");
+	return userId;
 }
 function assertSalesforceOrigin(request, instanceUrl) {
-    const actual = new URL(request.url).origin;
-    const expected = new URL(instanceUrl).origin;
-    if (actual !== expected) {
-        throw new Error(`Salesforce egress not allowed for origin "${actual}".`);
-    }
+	const actual = new URL(request.url).origin;
+	if (actual !== new URL(instanceUrl).origin) throw new Error(`Salesforce egress not allowed for origin "${actual}".`);
 }
 function createSalesforceEgressWrapper(options) {
-    return (handlers) => withHttpAuthenticationErrorHandling(withHttpRetryHandling({
-        ...handlers,
-        async fetch(request) {
-            assertSalesforceOrigin(request, options.instanceUrl);
-            const retryRequest = request.clone();
-            const send = async (current) => {
-                const headers = new Headers(current.headers);
-                headers.set("Authorization", `Bearer ${await options.tokenProvider()}`);
-                return handlers.fetch(new Request(current, {
-                    headers,
-                }));
-            };
-            let response = await send(request);
-            if (response.status === 401 &&
-                options.refresh) {
-                await options.refresh();
-                response =
-                    await send(retryRequest);
-            }
-            return response;
-        },
-    }));
+	return (handlers) => withHttpAuthenticationErrorHandling(withHttpRetryHandling({
+		...handlers,
+		async fetch(request) {
+			assertSalesforceOrigin(request, options.instanceUrl);
+			const retryRequest = request.clone();
+			const send = async (current) => {
+				const headers = new Headers(current.headers);
+				headers.set("Authorization", `Bearer ${await options.tokenProvider()}`);
+				return handlers.fetch(new Request(current, { headers }));
+			};
+			let response = await send(request);
+			if (response.status === 401 && options.refresh) {
+				await options.refresh();
+				response = await send(retryRequest);
+			}
+			return response;
+		}
+	}));
 }
 async function createSalesforceConnectionAdapterInstance(options, context) {
-    const instanceUrl = normalizeUrl(options.instanceUrl);
-    const apiVersion = options.apiVersion ?? "65.0";
-    const loginUrl = normalizeUrl(options.oauth?.loginUrl ??
-        options.clientCredentials?.loginUrl ??
-        instanceUrl);
-    const fetchImpl = options.oauth?.fetch ??
-        options.clientCredentials?.fetch ??
-        globalThis.fetch.bind(globalThis);
-    let tokenActive = Boolean(options.token);
-    const tokenProviders = new Map();
-    const publicOauth = options.oauth
-        ? await createPublicOAuthClient({
-            clientId: options.oauth.clientId,
-            redirectUrl: options.oauth.redirectUrl,
-            scopes: [
-                ...new Set(options.oauth.scopes ??
-                    DEFAULT_SCOPES),
-            ],
-            authorizationServer: {
-                issuer: loginUrl,
-                authorizationEndpoint: `${loginUrl}/services/oauth2/authorize`,
-                tokenEndpoint: `${loginUrl}/services/oauth2/token`,
-                revocationEndpoint: `${loginUrl}/services/oauth2/revoke`,
-            },
-            runtime: context.runtime,
-            fetch: options.oauth.fetch,
-            dangerouslyPersistSecrets: options.oauth
-                .dangerouslyPersistSecrets,
-            resolveUserId: (token) => resolveSalesforceUserId({
-                loginUrl,
-                token,
-                fetch: fetchImpl,
-            }),
-        })
-        : undefined;
-    const clientCredentialsOauth = options.clientCredentials
-        ? createClientCredentialsOAuthClient({
-            clientId: options.clientCredentials.clientId,
-            clientSecret: options.clientCredentials
-                .clientSecret,
-            tokenEndpoint: `${loginUrl}/services/oauth2/token`,
-            scopes: options.clientCredentials.scopes,
-            fetch: options.clientCredentials.fetch,
-            resolveUserId: (token) => resolveSalesforceUserId({
-                loginUrl,
-                token,
-                fetch: fetchImpl,
-            }),
-        })
-        : undefined;
-    const createTokenSession = async (authenticationOptions = {}) => {
-        const token = authenticationOptions.token ?? options.token;
-        if (!token) {
-            throw new Error("Salesforce access-token connections are not configured.");
-        }
-        const userId = authenticationOptions.userId ??
-            options.userId ??
-            (await resolveSalesforceUserId({
-                loginUrl,
-                token,
-                fetch: fetchImpl,
-            }));
-        const connection = {
-            userId,
-            state: { status: "active" },
-        };
-        tokenProviders.set(userId, () => Promise.resolve(token));
-        const session = {
-            disconnect() {
-                tokenProviders.delete(userId);
-                if (token === options.token) {
-                    tokenActive = false;
-                }
-                return Promise.resolve();
-            },
-            egress: createSalesforceEgressWrapper({
-                instanceUrl,
-                tokenProvider: () => Promise.resolve(token),
-            }),
-        };
-        return { connection, session };
-    };
-    const createPublicSession = (oauthSession) => {
-        const userId = oauthSession.userId;
-        const connection = {
-            userId,
-            state: activeState(oauthSession.expiration?.expiresAt, oauthSession.expiration?.refreshable ?? false),
-        };
-        const tokenProvider = () => {
-            if (!publicOauth) {
-                throw unauthenticated("Salesforce public OAuth is not configured.");
-            }
-            return publicOauth.getAccessToken(userId);
-        };
-        tokenProviders.set(userId, tokenProvider);
-        const session = {
-            async refresh() {
-                if (!publicOauth) {
-                    throw unauthenticated("Salesforce public OAuth is not configured.");
-                }
-                return createPublicSession(await publicOauth.refresh(userId));
-            },
-            async disconnect() {
-                tokenProviders.delete(userId);
-                await publicOauth?.revoke(userId);
-            },
-            egress: createSalesforceEgressWrapper({
-                instanceUrl,
-                tokenProvider,
-                refresh: async () => {
-                    if (!publicOauth) {
-                        throw unauthenticated("Salesforce public OAuth is not configured.");
-                    }
-                    await publicOauth.refresh(userId);
-                },
-            }),
-        };
-        return { connection, session };
-    };
-    const createClientCredentialsSession = async (forceRefresh = false) => {
-        if (!clientCredentialsOauth) {
-            throw new Error("Salesforce client credentials are not configured.");
-        }
-        const oauthSession = forceRefresh
-            ? await clientCredentialsOauth.refresh()
-            : await clientCredentialsOauth.getSession();
-        const userId = oauthSession.userId;
-        const tokenProvider = () => clientCredentialsOauth.getAccessToken();
-        tokenProviders.set(userId, tokenProvider);
-        return {
-            connection: {
-                userId,
-                state: activeState(oauthSession.expiration
-                    ?.expiresAt, true),
-            },
-            session: {
-                refresh: () => createClientCredentialsSession(true),
-                disconnect() {
-                    tokenProviders.delete(userId);
-                    return Promise.resolve();
-                },
-                egress: createSalesforceEgressWrapper({
-                    instanceUrl,
-                    tokenProvider,
-                    refresh: () => clientCredentialsOauth
-                        .refresh()
-                        .then(() => undefined),
-                }),
-            },
-        };
-    };
-    return {
-        name: "salesforce",
-        createAuthenticationClient(controller) {
-            return {
-                async subscribeToChangeEvents(userId, sObjectName, listener, subscriptionOptions) {
-                    const tokenProvider = tokenProviders.get(userId);
-                    if (!tokenProvider) {
-                        throw unauthenticated(`Salesforce connection for user "${userId}" is unavailable.`);
-                    }
-                    const client = createSalesforceClient({
-                        instanceUrl,
-                        apiVersion,
-                        cometdUrl: options.cometdUrl,
-                        tokenProvider,
-                    });
-                    return client.subscribeToChangeEvents(sObjectName, listener, subscriptionOptions);
-                },
-                async completeOAuthRedirect(url) {
-                    if (!publicOauth)
-                        return;
-                    const session = await publicOauth.completeRedirect(url);
-                    if (!session)
-                        return;
-                    const connectionSession = createPublicSession(session);
-                    await controller.connect(connectionSession);
-                    return connectionSession.connection;
-                },
-                signIn: {
-                    async oauth(authenticationOptions = {}) {
-                        if (!publicOauth) {
-                            throw new Error("Salesforce public OAuth is not configured.");
-                        }
-                        const session = await publicOauth.signIn({
-                            browserPresentation: authenticationOptions.browserPresentation,
-                        });
-                        const connectionSession = createPublicSession(session);
-                        await controller.connect(connectionSession);
-                        return connectionSession.connection;
-                    },
-                    async clientCredentials() {
-                        if (!clientCredentialsOauth) {
-                            throw new Error("Salesforce client credentials are not configured.");
-                        }
-                        if (typeof window !==
-                            "undefined") {
-                            throw new Error("Salesforce client credentials cannot run in a browser.");
-                        }
-                        const connectionSession = await createClientCredentialsSession();
-                        await controller.connect(connectionSession);
-                        return connectionSession.connection;
-                    },
-                    async accessToken(authenticationOptions = {}) {
-                        const connectionSession = await createTokenSession(authenticationOptions);
-                        if (authenticationOptions.token === undefined && options.token) {
-                            tokenActive = true;
-                        }
-                        await controller.connect(connectionSession);
-                        return connectionSession.connection;
-                    },
-                },
-            };
-        },
-        async restoreConnections() {
-            const restored = new Map();
-            if (tokenActive && options.token) {
-                const session = await createTokenSession();
-                restored.set(session.connection.userId, session);
-            }
-            if (publicOauth) {
-                for (const oauthSession of await publicOauth.restoreSessions()) {
-                    const session = createPublicSession(oauthSession);
-                    restored.set(session.connection.userId, session);
-                }
-            }
-            if (clientCredentialsOauth &&
-                typeof window === "undefined") {
-                const session = await createClientCredentialsSession();
-                restored.set(session.connection.userId, session);
-            }
-            return [...restored.values()];
-        },
-        async cleanup() {
-            tokenProviders.clear();
-            await publicOauth?.cleanup();
-            clientCredentialsOauth?.cleanup();
-        },
-    };
+	const instanceUrl = normalizeUrl(options.instanceUrl);
+	const apiVersion = options.apiVersion ?? "65.0";
+	const loginUrl = normalizeUrl(options.oauth?.loginUrl ?? options.clientCredentials?.loginUrl ?? instanceUrl);
+	const fetchImpl = options.oauth?.fetch ?? options.clientCredentials?.fetch ?? globalThis.fetch.bind(globalThis);
+	let tokenActive = Boolean(options.token);
+	const tokenProviders = /* @__PURE__ */ new Map();
+	const publicOauth = options.oauth ? await createPublicOAuthClient({
+		clientId: options.oauth.clientId,
+		redirectUrl: options.oauth.redirectUrl,
+		scopes: [...new Set(options.oauth.scopes ?? DEFAULT_SCOPES)],
+		authorizationServer: {
+			issuer: loginUrl,
+			authorizationEndpoint: `${loginUrl}/services/oauth2/authorize`,
+			tokenEndpoint: `${loginUrl}/services/oauth2/token`,
+			revocationEndpoint: `${loginUrl}/services/oauth2/revoke`
+		},
+		runtime: context.runtime,
+		fetch: options.oauth.fetch,
+		dangerouslyPersistSecrets: options.oauth.dangerouslyPersistSecrets,
+		resolveUserId: (token) => resolveSalesforceUserId({
+			loginUrl,
+			token,
+			fetch: fetchImpl
+		})
+	}) : void 0;
+	const clientCredentialsOauth = options.clientCredentials ? createClientCredentialsOAuthClient({
+		clientId: options.clientCredentials.clientId,
+		clientSecret: options.clientCredentials.clientSecret,
+		tokenEndpoint: `${loginUrl}/services/oauth2/token`,
+		scopes: options.clientCredentials.scopes,
+		fetch: options.clientCredentials.fetch,
+		resolveUserId: (token) => resolveSalesforceUserId({
+			loginUrl,
+			token,
+			fetch: fetchImpl
+		})
+	}) : void 0;
+	const createTokenSession = async (authenticationOptions = {}) => {
+		const token = authenticationOptions.token ?? options.token;
+		if (!token) throw new Error("Salesforce access-token connections are not configured.");
+		const userId = authenticationOptions.userId ?? options.userId ?? await resolveSalesforceUserId({
+			loginUrl,
+			token,
+			fetch: fetchImpl
+		});
+		const connection = {
+			userId,
+			state: { status: "active" }
+		};
+		tokenProviders.set(userId, () => Promise.resolve(token));
+		return {
+			connection,
+			session: {
+				disconnect() {
+					tokenProviders.delete(userId);
+					if (token === options.token) tokenActive = false;
+					return Promise.resolve();
+				},
+				egress: createSalesforceEgressWrapper({
+					instanceUrl,
+					tokenProvider: () => Promise.resolve(token)
+				})
+			}
+		};
+	};
+	const createPublicSession = (oauthSession) => {
+		const userId = oauthSession.userId;
+		const connection = {
+			userId,
+			state: activeState(oauthSession.expiration?.expiresAt, oauthSession.expiration?.refreshable ?? false)
+		};
+		const tokenProvider = () => {
+			if (!publicOauth) throw unauthenticated("Salesforce public OAuth is not configured.");
+			return publicOauth.getAccessToken(userId);
+		};
+		tokenProviders.set(userId, tokenProvider);
+		return {
+			connection,
+			session: {
+				async refresh() {
+					if (!publicOauth) throw unauthenticated("Salesforce public OAuth is not configured.");
+					return createPublicSession(await publicOauth.refresh(userId));
+				},
+				async disconnect() {
+					tokenProviders.delete(userId);
+					await publicOauth?.revoke(userId);
+				},
+				egress: createSalesforceEgressWrapper({
+					instanceUrl,
+					tokenProvider,
+					refresh: async () => {
+						if (!publicOauth) throw unauthenticated("Salesforce public OAuth is not configured.");
+						await publicOauth.refresh(userId);
+					}
+				})
+			}
+		};
+	};
+	const createClientCredentialsSession = async (forceRefresh = false) => {
+		if (!clientCredentialsOauth) throw new Error("Salesforce client credentials are not configured.");
+		const oauthSession = forceRefresh ? await clientCredentialsOauth.refresh() : await clientCredentialsOauth.getSession();
+		const userId = oauthSession.userId;
+		const tokenProvider = () => clientCredentialsOauth.getAccessToken();
+		tokenProviders.set(userId, tokenProvider);
+		return {
+			connection: {
+				userId,
+				state: activeState(oauthSession.expiration?.expiresAt, true)
+			},
+			session: {
+				refresh: () => createClientCredentialsSession(true),
+				disconnect() {
+					tokenProviders.delete(userId);
+					return Promise.resolve();
+				},
+				egress: createSalesforceEgressWrapper({
+					instanceUrl,
+					tokenProvider,
+					refresh: () => clientCredentialsOauth.refresh().then(() => void 0)
+				})
+			}
+		};
+	};
+	return {
+		name: "salesforce",
+		createAuthenticationClient(controller) {
+			return {
+				async subscribeToChangeEvents(userId, sObjectName, listener, subscriptionOptions) {
+					const tokenProvider = tokenProviders.get(userId);
+					if (!tokenProvider) throw unauthenticated(`Salesforce connection for user "${userId}" is unavailable.`);
+					return createSalesforceClient({
+						instanceUrl,
+						apiVersion,
+						cometdUrl: options.cometdUrl,
+						tokenProvider
+					}).subscribeToChangeEvents(sObjectName, listener, subscriptionOptions);
+				},
+				async completeOAuthRedirect(url) {
+					if (!publicOauth) return;
+					const session = await publicOauth.completeRedirect(url);
+					if (!session) return;
+					const connectionSession = createPublicSession(session);
+					await controller.connect(connectionSession);
+					return connectionSession.connection;
+				},
+				signIn: {
+					async oauth(authenticationOptions = {}) {
+						if (!publicOauth) throw new Error("Salesforce public OAuth is not configured.");
+						const session = await publicOauth.signIn({ browserPresentation: authenticationOptions.browserPresentation });
+						const connectionSession = createPublicSession(session);
+						await controller.connect(connectionSession);
+						return connectionSession.connection;
+					},
+					async clientCredentials() {
+						if (!clientCredentialsOauth) throw new Error("Salesforce client credentials are not configured.");
+						if (typeof window !== "undefined") throw new Error("Salesforce client credentials cannot run in a browser.");
+						const connectionSession = await createClientCredentialsSession();
+						await controller.connect(connectionSession);
+						return connectionSession.connection;
+					},
+					async accessToken(authenticationOptions = {}) {
+						const connectionSession = await createTokenSession(authenticationOptions);
+						if (authenticationOptions.token === void 0 && options.token) tokenActive = true;
+						await controller.connect(connectionSession);
+						return connectionSession.connection;
+					}
+				}
+			};
+		},
+		async restoreConnections() {
+			const restored = /* @__PURE__ */ new Map();
+			if (tokenActive && options.token) {
+				const session = await createTokenSession();
+				restored.set(session.connection.userId, session);
+			}
+			if (publicOauth) for (const oauthSession of await publicOauth.restoreSessions()) {
+				const session = createPublicSession(oauthSession);
+				restored.set(session.connection.userId, session);
+			}
+			if (clientCredentialsOauth && typeof window === "undefined") {
+				const session = await createClientCredentialsSession();
+				restored.set(session.connection.userId, session);
+			}
+			return [...restored.values()];
+		},
+		async cleanup() {
+			tokenProviders.clear();
+			await publicOauth?.cleanup();
+			clientCredentialsOauth?.cleanup();
+		}
+	};
 }
-export function createSalesforceConnectionAdapter(options) {
-    return (context) => createSalesforceConnectionAdapterInstance(options, context);
+function createSalesforceConnectionAdapter(options) {
+	return (context) => createSalesforceConnectionAdapterInstance(options, context);
 }
+//#endregion
+export { createSalesforceConnectionAdapter };
+
 //# sourceMappingURL=connection.js.map

package/lib/connection.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAQH,mCAAmC,EACnC,qBAAqB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACH,kCAAkC,EAClC,uBAAuB,GAI1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACH,sBAAsB,GAIzB,MAAM,gCAAgC,CAAC;AAuDxC,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAE1D,SAAS,YAAY,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAChB,SAA6B,EAC7B,WAAoB;IAEpB,OAAO,SAAS,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE;QACtB,CAAC,CAAC;YACI,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACR,SAAS;gBACT,WAAW;aACd;SACJ,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAItC;IACG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,2BAA2B,EAAE;QACjF,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;YACxC,MAAM,EAAE,kBAAkB;SAC7B;KACJ,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACX,0CAA0C,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CACxF,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB,EAAE,WAAmB;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,IAAI,CAAC,CAAC;IAC7E,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,OAItC;IACG,OAAO,CAAC,QAAQ,EAAE,EAAE,CAChB,mCAAmC,CAC/B,qBAAqB,CAAC;QAClB,GAAG,QAAQ;QACX,KAAK,CAAC,KAAK,CAAC,OAAO;YACf,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACrD,MAAM,YAAY,GACd,OAAO,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,KAAK,EACd,OAAgB,EAClB,EAAE;gBACA,MAAM,OAAO,GAAG,IAAI,OAAO,CACvB,OAAO,CAAC,OAAO,CAClB,CAAC;gBACF,OAAO,CAAC,GAAG,CACP,eAAe,EACf,UAAU,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAC5C,CAAC;gBACF,OAAO,QAAQ,CAAC,KAAK,CACjB,IAAI,OAAO,CAAC,OAAO,EAAE;oBACjB,OAAO;iBACV,CAAC,CACL,CAAC;YACN,CAAC,CAAC;YACF,IAAI,QAAQ,GACR,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,IACI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,OAAO,CAAC,OAAO,EACjB,CAAC;gBACC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,QAAQ;oBACJ,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,QAAQ,CAAC;QACpB,CAAC;KACJ,CAAC,CACL,CAAC;AACV,CAAC;AAED,KAAK,UAAU,yCAAyC,CACpD,OAAiD,EACjD,OAAwC;IAExC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,QAAQ,GAAG,YAAY,CACzB,OAAO,CAAC,KAAK,EAAE,QAAQ;QACnB,OAAO,CAAC,iBAAiB,EAAE,QAAQ;QACnC,WAAW,CAClB,CAAC;IACF,MAAM,SAAS,GACX,OAAO,CAAC,KAAK,EAAE,KAAK;QACpB,OAAO,CAAC,iBAAiB,EAAE,KAAK;QAChC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,GAAG,EAG3B,CAAC;IACJ,MAAM,WAAW,GACb,OAAO,CAAC,KAAK;QACT,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC1B,QAAQ,EACJ,OAAO,CAAC,KAAK,CAAC,QAAQ;YAC1B,WAAW,EACP,OAAO,CAAC,KAAK,CAAC,WAAW;YAC7B,MAAM,EAAE;gBACJ,GAAG,IAAI,GAAG,CACN,OAAO,CAAC,KAAK,CAAC,MAAM;oBAChB,cAAc,CACrB;aACJ;YACD,mBAAmB,EAAE;gBACjB,MAAM,EAAE,QAAQ;gBAChB,qBAAqB,EAAE,GAAG,QAAQ,4BAA4B;gBAC9D,aAAa,EAAE,GAAG,QAAQ,wBAAwB;gBAClD,kBAAkB,EAAE,GAAG,QAAQ,yBAAyB;aAC3D;YACD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,yBAAyB,EACrB,OAAO,CAAC,KAAK;iBACR,yBAAyB;YAClC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,uBAAuB,CAAC;gBACpB,QAAQ;gBACR,KAAK;gBACL,KAAK,EAAE,SAAS;aACnB,CAAC;SACT,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACpB,MAAM,sBAAsB,GAEV,OAAO,CAAC,iBAAiB;QACvC,CAAC,CAAC,kCAAkC,CAAC;YAC/B,QAAQ,EACJ,OAAO,CAAC,iBAAiB,CAAC,QAAQ;YACtC,YAAY,EACR,OAAO,CAAC,iBAAiB;iBACpB,YAAY;YACrB,aAAa,EAAE,GAAG,QAAQ,wBAAwB;YAClD,MAAM,EACF,OAAO,CAAC,iBAAiB,CAAC,MAAM;YACpC,KAAK,EACD,OAAO,CAAC,iBAAiB,CAAC,KAAK;YACnC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,uBAAuB,CAAC;gBACpB,QAAQ;gBACR,KAAK;gBACL,KAAK,EAAE,SAAS;aACnB,CAAC;SACT,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,kBAAkB,GAAG,KAAK,EAAE,wBAG9B,EAAE,EAAkC,EAAE;QACtC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GACR,qBAAqB,CAAC,MAAM;YAC5B,OAAO,CAAC,MAAM;YACd,CAAC,MAAM,uBAAuB,CAAC;gBAC3B,QAAQ;gBACR,KAAK;gBACL,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC,CAAC;QACR,MAAM,UAAU,GAAyB;YACrC,MAAM;YACN,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC9B,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAC5B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CACzB,CAAC;QACF,MAAM,OAAO,GAAsB;YAC/B,UAAU;gBACN,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC1B,WAAW,GAAG,KAAK,CAAC;gBACxB,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,EAAE,6BAA6B,CAAC;gBAClC,WAAW;gBACX,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;aAC9C,CAAC;SACL,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,YAA0B,EAAyB,EAAE;QAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QACnC,MAAM,UAAU,GAAyB;YACrC,MAAM;YACN,KAAK,EAAE,WAAW,CACd,YAAY,CAAC,UAAU,EAAE,SAAS,EAClC,YAAY,CAAC,UAAU,EAAE,WAAW,IAAI,KAAK,CAChD;SACJ,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,EAAE;YACvB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,MAAM,eAAe,CACjB,4CAA4C,CAC/C,CAAC;YACN,CAAC;YACD,OAAO,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAsB;YAC/B,KAAK,CAAC,OAAO;gBACT,IAAI,CAAC,WAAW,EAAE,CAAC;oBACf,MAAM,eAAe,CAAC,4CAA4C,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO,mBAAmB,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,CAAC,UAAU;gBACZ,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,EAAE,6BAA6B,CAAC;gBAClC,WAAW;gBACX,aAAa;gBACb,OAAO,EAAE,KAAK,IAAI,EAAE;oBAChB,IAAI,CAAC,WAAW,EAAE,CAAC;wBACf,MAAM,eAAe,CACjB,4CAA4C,CAC/C,CAAC;oBACN,CAAC;oBACD,MAAM,WAAW,CAAC,OAAO,CACrB,MAAM,CACT,CAAC;gBACN,CAAC;aACJ,CAAC;SACL,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,8BAA8B,GAChC,KAAK,EACD,YAAY,GAAG,KAAK,EACU,EAAE;QAChC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACX,mDAAmD,CACtD,CAAC;QACN,CAAC;QACD,MAAM,YAAY,GAAG,YAAY;YAC7B,CAAC,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE;YACxC,CAAC,CAAC,MAAM,sBAAsB,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QACnC,MAAM,aAAa,GAAG,GAAG,EAAE,CACvB,sBAAsB,CAAC,cAAc,EAAE,CAAC;QAC5C,cAAc,CAAC,GAAG,CACd,MAAM,EACN,aAAa,CAChB,CAAC;QACF,OAAO;YACH,UAAU,EAAE;gBACR,MAAM;gBACN,KAAK,EAAE,WAAW,CACd,YAAY,CAAC,UAAU;oBACnB,EAAE,SAAS,EACf,IAAI,CACP;aACJ;YACD,OAAO,EAAE;gBACL,OAAO,EAAE,GAAG,EAAE,CACV,8BAA8B,CAC1B,IAAI,CACP;gBACL,UAAU;oBACN,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC7B,CAAC;gBACD,MAAM,EACF,6BAA6B,CAAC;oBAC1B,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,GAAG,EAAE,CACV,sBAAsB;yBACjB,OAAO,EAAE;yBACT,IAAI,CACD,GAAG,EAAE,CACD,SAAS,CAChB;iBACZ,CAAC;aACT;SACJ,CAAC;IACN,CAAC,CAAC;IAEN,OAAO;QACH,IAAI,EAAE,YAAY;QAClB,0BAA0B,CAAC,UAAU;YACjC,OAAO;gBACH,KAAK,CAAC,uBAAuB,CACzB,MAAM,EACN,WAAW,EACX,QAAQ,EACR,mBAAmB;oBAEnB,MAAM,aAAa,GACf,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC/B,IAAI,CAAC,aAAa,EAAE,CAAC;wBACjB,MAAM,eAAe,CACjB,mCAAmC,MAAM,mBAAmB,CAC/D,CAAC;oBACN,CAAC;oBACD,MAAM,MAAM,GACR,sBAAsB,CAAC;wBACnB,WAAW;wBACX,UAAU;wBACV,SAAS,EACL,OAAO,CAAC,SAAS;wBACrB,aAAa;qBAChB,CAAC,CAAC;oBACP,OAAO,MAAM,CAAC,uBAAuB,CACjC,WAAW,EACX,QAAQ,EACR,mBAAmB,CACtB,CAAC;gBACN,CAAC;gBACD,KAAK,CAAC,qBAAqB,CAAC,GAAG;oBAC3B,IAAI,CAAC,WAAW;wBAAE,OAAO;oBACzB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBACxD,IAAI,CAAC,OAAO;wBAAE,OAAO;oBACrB,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBACvD,MAAM,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;oBAC5C,OAAO,iBAAiB,CAAC,UAAU,CAAC;gBACxC,CAAC;gBACD,MAAM,EAAE;oBACJ,KAAK,CAAC,KAAK,CAAC,qBAAqB,GAAG,EAAE;wBAClC,IAAI,CAAC,WAAW,EAAE,CAAC;4BACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;wBAClE,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;4BACrC,mBAAmB,EAAE,qBAAqB,CAAC,mBAAmB;yBACjE,CAAC,CAAC;wBACH,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;wBACvD,MAAM,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;wBAC5C,OAAO,iBAAiB,CAAC,UAAU,CAAC;oBACxC,CAAC;oBACD,KAAK,CAAC,iBAAiB;wBACnB,IAAI,CAAC,sBAAsB,EAAE,CAAC;4BAC1B,MAAM,IAAI,KAAK,CACX,mDAAmD,CACtD,CAAC;wBACN,CAAC;wBACD,IACI,OAAO,MAAM;4BACb,WAAW,EACb,CAAC;4BACC,MAAM,IAAI,KAAK,CACX,wDAAwD,CAC3D,CAAC;wBACN,CAAC;wBACD,MAAM,iBAAiB,GACnB,MAAM,8BAA8B,EAAE,CAAC;wBAC3C,MAAM,UAAU,CAAC,OAAO,CACpB,iBAAiB,CACpB,CAAC;wBACF,OAAO,iBAAiB,CAAC,UAAU,CAAC;oBACxC,CAAC;oBACD,KAAK,CAAC,WAAW,CAAC,qBAAqB,GAAG,EAAE;wBACxC,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;wBAC1E,IAAI,qBAAqB,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;4BAC7D,WAAW,GAAG,IAAI,CAAC;wBACvB,CAAC;wBACD,MAAM,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;wBAC5C,OAAO,iBAAiB,CAAC,UAAU,CAAC;oBACxC,CAAC;iBACJ;aACJ,CAAC;QACN,CAAC;QACD,KAAK,CAAC,kBAAkB;YACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;YAC1D,IAAI,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;gBAC3C,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBACd,KAAK,MAAM,YAAY,IAAI,MAAM,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;oBAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;oBAClD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC;YACL,CAAC;YACD,IACI,sBAAsB;gBACtB,OAAO,MAAM,KAAK,WAAW,EAC/B,CAAC;gBACC,MAAM,OAAO,GACT,MAAM,8BAA8B,EAAE,CAAC;gBAC3C,QAAQ,CAAC,GAAG,CACR,OAAO,CAAC,UAAU,CAAC,MAAM,EACzB,OAAO,CACV,CAAC;YACN,CAAC;YACD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,OAAO;YACT,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,WAAW,EAAE,OAAO,EAAE,CAAC;YAC7B,sBAAsB,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC7C,OAAiD;IAEjD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,yCAAyC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACpF,CAAC"}
+{"version":3,"file":"connection.js","names":[],"sources":["../src/connection.ts"],"sourcesContent":["import {\n    type BackendConnectionAdapter,\n    type BackendConnectionAdapterContext,\n    type BackendConnectionAdapterProvider,\n    type Connection,\n    type ConnectionEgressHandlers,\n    type ConnectionSession,\n    type EstablishedConnection,\n    withHttpAuthenticationErrorHandling,\n    withHttpRetryHandling,\n} from \"@party-stack/connections\";\nimport { unauthenticated } from \"@party-stack/errors\";\nimport {\n    createClientCredentialsOAuthClient,\n    createPublicOAuthClient,\n    type ClientCredentialsOAuthClient,\n    type OAuthSession,\n    type PublicOAuthClient,\n} from \"@party-stack/oauth\";\nimport {\n    createSalesforceClient,\n    type SalesforceChangeEvent,\n    type SalesforceChangeEventSubscription,\n    type SalesforceChangeEventSubscriptionOptions,\n} from \"@party-stack/salesforce-client\";\nimport type { BrowserAuthenticationPresentation } from \"@party-stack/runtime\";\n\nexport interface SalesforceOAuthConnectionOptions {\n    clientId: string;\n    redirectUrl: string;\n    loginUrl?: string;\n    scopes?: string[];\n    fetch?: typeof globalThis.fetch;\n    dangerouslyPersistSecrets?: boolean;\n}\n\nexport interface SalesforceClientCredentialsConnectionOptions {\n    clientId: string;\n    clientSecret: string;\n    loginUrl?: string;\n    scopes?: string[];\n    fetch?: typeof globalThis.fetch;\n}\n\nexport interface CreateSalesforceConnectionAdapterOptions {\n    instanceUrl: string;\n    apiVersion?: string;\n    cometdUrl?: string;\n    oauth?: SalesforceOAuthConnectionOptions;\n    clientCredentials?: SalesforceClientCredentialsConnectionOptions;\n    token?: string;\n    userId?: string;\n}\n\nexport interface SalesforceAuthenticationClient {\n    completeOAuthRedirect(url: string): Promise<Connection<\"active\"> | undefined>;\n    subscribeToChangeEvents(\n        userId: string,\n        sObjectName: string,\n        listener: (event: SalesforceChangeEvent) => void,\n        options?: SalesforceChangeEventSubscriptionOptions\n    ): Promise<SalesforceChangeEventSubscription>;\n    signIn: {\n        oauth(options?: {\n            browserPresentation?: BrowserAuthenticationPresentation;\n        }): Promise<Connection<\"active\">>;\n        clientCredentials(): Promise<Connection<\"active\">>;\n        accessToken(options?: { token?: string; userId?: string }): Promise<Connection<\"active\">>;\n    };\n}\n\ninterface SalesforceUserInfo {\n    user_id?: string;\n    sub?: string;\n}\n\nconst DEFAULT_SCOPES = [\"api\", \"refresh_token\", \"openid\"];\n\nfunction normalizeUrl(value: string): string {\n    return value.replace(/\\/+$/, \"\");\n}\n\nfunction activeState(expiresAt: number | undefined, refreshable: boolean): Connection<\"active\">[\"state\"] {\n    return expiresAt === undefined\n        ? { status: \"active\" }\n        : {\n              status: \"active\",\n              expiration: {\n                  expiresAt,\n                  refreshable,\n              },\n          };\n}\n\nasync function resolveSalesforceUserId(options: {\n    loginUrl: string;\n    token: string;\n    fetch: typeof globalThis.fetch;\n}): Promise<string> {\n    const response = await options.fetch(`${options.loginUrl}/services/oauth2/userinfo`, {\n        headers: {\n            Authorization: `Bearer ${options.token}`,\n            Accept: \"application/json\",\n        },\n    });\n    if (response.status === 401) {\n        throw unauthenticated(\"Salesforce access token is invalid or expired.\");\n    }\n    if (!response.ok) {\n        throw new Error(\n            `Salesforce userinfo failed with status ${response.status}: ${await response.text()}`\n        );\n    }\n    const user = (await response.json()) as SalesforceUserInfo;\n    const userId = user.user_id ?? user.sub;\n    if (!userId) {\n        throw new Error(\"Salesforce userinfo did not return user_id or sub.\");\n    }\n    return userId;\n}\n\nfunction assertSalesforceOrigin(request: Request, instanceUrl: string): void {\n    const actual = new URL(request.url).origin;\n    const expected = new URL(instanceUrl).origin;\n    if (actual !== expected) {\n        throw new Error(`Salesforce egress not allowed for origin \"${actual}\".`);\n    }\n}\n\nfunction createSalesforceEgressWrapper(options: {\n    instanceUrl: string;\n    tokenProvider: () => Promise<string>;\n    refresh?: () => Promise<void>;\n}): (handlers: ConnectionEgressHandlers) => ConnectionEgressHandlers {\n    return (handlers) =>\n        withHttpAuthenticationErrorHandling(\n            withHttpRetryHandling({\n                ...handlers,\n                async fetch(request) {\n                    assertSalesforceOrigin(request, options.instanceUrl);\n                    const retryRequest = request.clone();\n                    const send = async (current: Request) => {\n                        const headers = new Headers(current.headers);\n                        headers.set(\"Authorization\", `Bearer ${await options.tokenProvider()}`);\n                        return handlers.fetch(\n                            new Request(current, {\n                                headers,\n                            })\n                        );\n                    };\n                    let response = await send(request);\n                    if (response.status === 401 && options.refresh) {\n                        await options.refresh();\n                        response = await send(retryRequest);\n                    }\n                    return response;\n                },\n            })\n        );\n}\n\nasync function createSalesforceConnectionAdapterInstance(\n    options: CreateSalesforceConnectionAdapterOptions,\n    context: BackendConnectionAdapterContext\n): Promise<BackendConnectionAdapter<SalesforceAuthenticationClient>> {\n    const instanceUrl = normalizeUrl(options.instanceUrl);\n    const apiVersion = options.apiVersion ?? \"65.0\";\n    const loginUrl = normalizeUrl(\n        options.oauth?.loginUrl ?? options.clientCredentials?.loginUrl ?? instanceUrl\n    );\n    const fetchImpl =\n        options.oauth?.fetch ?? options.clientCredentials?.fetch ?? globalThis.fetch.bind(globalThis);\n    let tokenActive = Boolean(options.token);\n    const tokenProviders = new Map<string, () => Promise<string>>();\n    const publicOauth: PublicOAuthClient | undefined = options.oauth\n        ? await createPublicOAuthClient({\n              clientId: options.oauth.clientId,\n              redirectUrl: options.oauth.redirectUrl,\n              scopes: [...new Set(options.oauth.scopes ?? DEFAULT_SCOPES)],\n              authorizationServer: {\n                  issuer: loginUrl,\n                  authorizationEndpoint: `${loginUrl}/services/oauth2/authorize`,\n                  tokenEndpoint: `${loginUrl}/services/oauth2/token`,\n                  revocationEndpoint: `${loginUrl}/services/oauth2/revoke`,\n              },\n              runtime: context.runtime,\n              fetch: options.oauth.fetch,\n              dangerouslyPersistSecrets: options.oauth.dangerouslyPersistSecrets,\n              resolveUserId: (token) =>\n                  resolveSalesforceUserId({\n                      loginUrl,\n                      token,\n                      fetch: fetchImpl,\n                  }),\n          })\n        : undefined;\n    const clientCredentialsOauth: ClientCredentialsOAuthClient | undefined = options.clientCredentials\n        ? createClientCredentialsOAuthClient({\n              clientId: options.clientCredentials.clientId,\n              clientSecret: options.clientCredentials.clientSecret,\n              tokenEndpoint: `${loginUrl}/services/oauth2/token`,\n              scopes: options.clientCredentials.scopes,\n              fetch: options.clientCredentials.fetch,\n              resolveUserId: (token) =>\n                  resolveSalesforceUserId({\n                      loginUrl,\n                      token,\n                      fetch: fetchImpl,\n                  }),\n          })\n        : undefined;\n\n    const createTokenSession = async (\n        authenticationOptions: {\n            token?: string;\n            userId?: string;\n        } = {}\n    ): Promise<EstablishedConnection> => {\n        const token = authenticationOptions.token ?? options.token;\n        if (!token) {\n            throw new Error(\"Salesforce access-token connections are not configured.\");\n        }\n        const userId =\n            authenticationOptions.userId ??\n            options.userId ??\n            (await resolveSalesforceUserId({\n                loginUrl,\n                token,\n                fetch: fetchImpl,\n            }));\n        const connection: Connection<\"active\"> = {\n            userId,\n            state: { status: \"active\" },\n        };\n        tokenProviders.set(userId, () => Promise.resolve(token));\n        const session: ConnectionSession = {\n            disconnect() {\n                tokenProviders.delete(userId);\n                if (token === options.token) {\n                    tokenActive = false;\n                }\n                return Promise.resolve();\n            },\n            egress: createSalesforceEgressWrapper({\n                instanceUrl,\n                tokenProvider: () => Promise.resolve(token),\n            }),\n        };\n        return { connection, session };\n    };\n\n    const createPublicSession = (oauthSession: OAuthSession): EstablishedConnection => {\n        const userId = oauthSession.userId;\n        const connection: Connection<\"active\"> = {\n            userId,\n            state: activeState(\n                oauthSession.expiration?.expiresAt,\n                oauthSession.expiration?.refreshable ?? false\n            ),\n        };\n        const tokenProvider = () => {\n            if (!publicOauth) {\n                throw unauthenticated(\"Salesforce public OAuth is not configured.\");\n            }\n            return publicOauth.getAccessToken(userId);\n        };\n        tokenProviders.set(userId, tokenProvider);\n        const session: ConnectionSession = {\n            async refresh() {\n                if (!publicOauth) {\n                    throw unauthenticated(\"Salesforce public OAuth is not configured.\");\n                }\n                return createPublicSession(await publicOauth.refresh(userId));\n            },\n            async disconnect() {\n                tokenProviders.delete(userId);\n                await publicOauth?.revoke(userId);\n            },\n            egress: createSalesforceEgressWrapper({\n                instanceUrl,\n                tokenProvider,\n                refresh: async () => {\n                    if (!publicOauth) {\n                        throw unauthenticated(\"Salesforce public OAuth is not configured.\");\n                    }\n                    await publicOauth.refresh(userId);\n                },\n            }),\n        };\n        return { connection, session };\n    };\n\n    const createClientCredentialsSession = async (forceRefresh = false): Promise<EstablishedConnection> => {\n        if (!clientCredentialsOauth) {\n            throw new Error(\"Salesforce client credentials are not configured.\");\n        }\n        const oauthSession = forceRefresh\n            ? await clientCredentialsOauth.refresh()\n            : await clientCredentialsOauth.getSession();\n        const userId = oauthSession.userId;\n        const tokenProvider = () => clientCredentialsOauth.getAccessToken();\n        tokenProviders.set(userId, tokenProvider);\n        return {\n            connection: {\n                userId,\n                state: activeState(oauthSession.expiration?.expiresAt, true),\n            },\n            session: {\n                refresh: () => createClientCredentialsSession(true),\n                disconnect() {\n                    tokenProviders.delete(userId);\n                    return Promise.resolve();\n                },\n                egress: createSalesforceEgressWrapper({\n                    instanceUrl,\n                    tokenProvider,\n                    refresh: () => clientCredentialsOauth.refresh().then(() => undefined),\n                }),\n            },\n        };\n    };\n\n    return {\n        name: \"salesforce\",\n        createAuthenticationClient(controller) {\n            return {\n                async subscribeToChangeEvents(userId, sObjectName, listener, subscriptionOptions) {\n                    const tokenProvider = tokenProviders.get(userId);\n                    if (!tokenProvider) {\n                        throw unauthenticated(`Salesforce connection for user \"${userId}\" is unavailable.`);\n                    }\n                    const client = createSalesforceClient({\n                        instanceUrl,\n                        apiVersion,\n                        cometdUrl: options.cometdUrl,\n                        tokenProvider,\n                    });\n                    return client.subscribeToChangeEvents(sObjectName, listener, subscriptionOptions);\n                },\n                async completeOAuthRedirect(url) {\n                    if (!publicOauth) return;\n                    const session = await publicOauth.completeRedirect(url);\n                    if (!session) return;\n                    const connectionSession = createPublicSession(session);\n                    await controller.connect(connectionSession);\n                    return connectionSession.connection;\n                },\n                signIn: {\n                    async oauth(authenticationOptions = {}) {\n                        if (!publicOauth) {\n                            throw new Error(\"Salesforce public OAuth is not configured.\");\n                        }\n                        const session = await publicOauth.signIn({\n                            browserPresentation: authenticationOptions.browserPresentation,\n                        });\n                        const connectionSession = createPublicSession(session);\n                        await controller.connect(connectionSession);\n                        return connectionSession.connection;\n                    },\n                    async clientCredentials() {\n                        if (!clientCredentialsOauth) {\n                            throw new Error(\"Salesforce client credentials are not configured.\");\n                        }\n                        if (typeof window !== \"undefined\") {\n                            throw new Error(\"Salesforce client credentials cannot run in a browser.\");\n                        }\n                        const connectionSession = await createClientCredentialsSession();\n                        await controller.connect(connectionSession);\n                        return connectionSession.connection;\n                    },\n                    async accessToken(authenticationOptions = {}) {\n                        const connectionSession = await createTokenSession(authenticationOptions);\n                        if (authenticationOptions.token === undefined && options.token) {\n                            tokenActive = true;\n                        }\n                        await controller.connect(connectionSession);\n                        return connectionSession.connection;\n                    },\n                },\n            };\n        },\n        async restoreConnections() {\n            const restored = new Map<string, EstablishedConnection>();\n            if (tokenActive && options.token) {\n                const session = await createTokenSession();\n                restored.set(session.connection.userId, session);\n            }\n            if (publicOauth) {\n                for (const oauthSession of await publicOauth.restoreSessions()) {\n                    const session = createPublicSession(oauthSession);\n                    restored.set(session.connection.userId, session);\n                }\n            }\n            if (clientCredentialsOauth && typeof window === \"undefined\") {\n                const session = await createClientCredentialsSession();\n                restored.set(session.connection.userId, session);\n            }\n            return [...restored.values()];\n        },\n        async cleanup() {\n            tokenProviders.clear();\n            await publicOauth?.cleanup();\n            clientCredentialsOauth?.cleanup();\n        },\n    };\n}\n\nexport function createSalesforceConnectionAdapter(\n    options: CreateSalesforceConnectionAdapterOptions\n): BackendConnectionAdapterProvider<SalesforceAuthenticationClient> {\n    return (context) => createSalesforceConnectionAdapterInstance(options, context);\n}\n"],"mappings":";;;;;AA4EA,MAAM,iBAAiB;CAAC;CAAO;CAAiB;AAAQ;AAExD,SAAS,aAAa,OAAuB;CACzC,OAAO,MAAM,QAAQ,QAAQ,EAAE;AACnC;AAEA,SAAS,YAAY,WAA+B,aAAqD;CACrG,OAAO,cAAc,KAAA,IACf,EAAE,QAAQ,SAAS,IACnB;EACI,QAAQ;EACR,YAAY;GACR;GACA;EACJ;CACJ;AACV;AAEA,eAAe,wBAAwB,SAInB;CAChB,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,QAAQ,SAAS,4BAA4B,EACjF,SAAS;EACL,eAAe,UAAU,QAAQ;EACjC,QAAQ;CACZ,EACJ,CAAC;CACD,IAAI,SAAS,WAAW,KACpB,MAAM,gBAAgB,gDAAgD;CAE1E,IAAI,CAAC,SAAS,IACV,MAAM,IAAI,MACN,0CAA0C,SAAS,OAAO,IAAI,MAAM,SAAS,KAAK,GACtF;CAEJ,MAAM,OAAQ,MAAM,SAAS,KAAK;CAClC,MAAM,SAAS,KAAK,WAAW,KAAK;CACpC,IAAI,CAAC,QACD,MAAM,IAAI,MAAM,oDAAoD;CAExE,OAAO;AACX;AAEA,SAAS,uBAAuB,SAAkB,aAA2B;CACzE,MAAM,SAAS,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;CAEpC,IAAI,WADa,IAAI,IAAI,WAAW,CAAC,CAAC,QAElC,MAAM,IAAI,MAAM,6CAA6C,OAAO,GAAG;AAE/E;AAEA,SAAS,8BAA8B,SAI8B;CACjE,QAAQ,aACJ,oCACI,sBAAsB;EAClB,GAAG;EACH,MAAM,MAAM,SAAS;GACjB,uBAAuB,SAAS,QAAQ,WAAW;GACnD,MAAM,eAAe,QAAQ,MAAM;GACnC,MAAM,OAAO,OAAO,YAAqB;IACrC,MAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;IAC3C,QAAQ,IAAI,iBAAiB,UAAU,MAAM,QAAQ,cAAc,GAAG;IACtE,OAAO,SAAS,MACZ,IAAI,QAAQ,SAAS,EACjB,QACJ,CAAC,CACL;GACJ;GACA,IAAI,WAAW,MAAM,KAAK,OAAO;GACjC,IAAI,SAAS,WAAW,OAAO,QAAQ,SAAS;IAC5C,MAAM,QAAQ,QAAQ;IACtB,WAAW,MAAM,KAAK,YAAY;GACtC;GACA,OAAO;EACX;CACJ,CAAC,CACL;AACR;AAEA,eAAe,0CACX,SACA,SACiE;CACjE,MAAM,cAAc,aAAa,QAAQ,WAAW;CACpD,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,aACb,QAAQ,OAAO,YAAY,QAAQ,mBAAmB,YAAY,WACtE;CACA,MAAM,YACF,QAAQ,OAAO,SAAS,QAAQ,mBAAmB,SAAS,WAAW,MAAM,KAAK,UAAU;CAChG,IAAI,cAAc,QAAQ,QAAQ,KAAK;CACvC,MAAM,iCAAiB,IAAI,IAAmC;CAC9D,MAAM,cAA6C,QAAQ,QACrD,MAAM,wBAAwB;EAC1B,UAAU,QAAQ,MAAM;EACxB,aAAa,QAAQ,MAAM;EAC3B,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,MAAM,UAAU,cAAc,CAAC;EAC3D,qBAAqB;GACjB,QAAQ;GACR,uBAAuB,GAAG,SAAS;GACnC,eAAe,GAAG,SAAS;GAC3B,oBAAoB,GAAG,SAAS;EACpC;EACA,SAAS,QAAQ;EACjB,OAAO,QAAQ,MAAM;EACrB,2BAA2B,QAAQ,MAAM;EACzC,gBAAgB,UACZ,wBAAwB;GACpB;GACA;GACA,OAAO;EACX,CAAC;CACT,CAAC,IACD,KAAA;CACN,MAAM,yBAAmE,QAAQ,oBAC3E,mCAAmC;EAC/B,UAAU,QAAQ,kBAAkB;EACpC,cAAc,QAAQ,kBAAkB;EACxC,eAAe,GAAG,SAAS;EAC3B,QAAQ,QAAQ,kBAAkB;EAClC,OAAO,QAAQ,kBAAkB;EACjC,gBAAgB,UACZ,wBAAwB;GACpB;GACA;GACA,OAAO;EACX,CAAC;CACT,CAAC,IACD,KAAA;CAEN,MAAM,qBAAqB,OACvB,wBAGI,CAAC,MAC4B;EACjC,MAAM,QAAQ,sBAAsB,SAAS,QAAQ;EACrD,IAAI,CAAC,OACD,MAAM,IAAI,MAAM,yDAAyD;EAE7E,MAAM,SACF,sBAAsB,UACtB,QAAQ,UACP,MAAM,wBAAwB;GAC3B;GACA;GACA,OAAO;EACX,CAAC;EACL,MAAM,aAAmC;GACrC;GACA,OAAO,EAAE,QAAQ,SAAS;EAC9B;EACA,eAAe,IAAI,cAAc,QAAQ,QAAQ,KAAK,CAAC;EAcvD,OAAO;GAAE;GAAY,SAAA;IAZjB,aAAa;KACT,eAAe,OAAO,MAAM;KAC5B,IAAI,UAAU,QAAQ,OAClB,cAAc;KAElB,OAAO,QAAQ,QAAQ;IAC3B;IACA,QAAQ,8BAA8B;KAClC;KACA,qBAAqB,QAAQ,QAAQ,KAAK;IAC9C,CAAC;GAEsB;EAAE;CACjC;CAEA,MAAM,uBAAuB,iBAAsD;EAC/E,MAAM,SAAS,aAAa;EAC5B,MAAM,aAAmC;GACrC;GACA,OAAO,YACH,aAAa,YAAY,WACzB,aAAa,YAAY,eAAe,KAC5C;EACJ;EACA,MAAM,sBAAsB;GACxB,IAAI,CAAC,aACD,MAAM,gBAAgB,4CAA4C;GAEtE,OAAO,YAAY,eAAe,MAAM;EAC5C;EACA,eAAe,IAAI,QAAQ,aAAa;EAuBxC,OAAO;GAAE;GAAY,SAAA;IArBjB,MAAM,UAAU;KACZ,IAAI,CAAC,aACD,MAAM,gBAAgB,4CAA4C;KAEtE,OAAO,oBAAoB,MAAM,YAAY,QAAQ,MAAM,CAAC;IAChE;IACA,MAAM,aAAa;KACf,eAAe,OAAO,MAAM;KAC5B,MAAM,aAAa,OAAO,MAAM;IACpC;IACA,QAAQ,8BAA8B;KAClC;KACA;KACA,SAAS,YAAY;MACjB,IAAI,CAAC,aACD,MAAM,gBAAgB,4CAA4C;MAEtE,MAAM,YAAY,QAAQ,MAAM;KACpC;IACJ,CAAC;GAEsB;EAAE;CACjC;CAEA,MAAM,iCAAiC,OAAO,eAAe,UAA0C;EACnG,IAAI,CAAC,wBACD,MAAM,IAAI,MAAM,mDAAmD;EAEvE,MAAM,eAAe,eACf,MAAM,uBAAuB,QAAQ,IACrC,MAAM,uBAAuB,WAAW;EAC9C,MAAM,SAAS,aAAa;EAC5B,MAAM,sBAAsB,uBAAuB,eAAe;EAClE,eAAe,IAAI,QAAQ,aAAa;EACxC,OAAO;GACH,YAAY;IACR;IACA,OAAO,YAAY,aAAa,YAAY,WAAW,IAAI;GAC/D;GACA,SAAS;IACL,eAAe,+BAA+B,IAAI;IAClD,aAAa;KACT,eAAe,OAAO,MAAM;KAC5B,OAAO,QAAQ,QAAQ;IAC3B;IACA,QAAQ,8BAA8B;KAClC;KACA;KACA,eAAe,uBAAuB,QAAQ,CAAC,CAAC,WAAW,KAAA,CAAS;IACxE,CAAC;GACL;EACJ;CACJ;CAEA,OAAO;EACH,MAAM;EACN,2BAA2B,YAAY;GACnC,OAAO;IACH,MAAM,wBAAwB,QAAQ,aAAa,UAAU,qBAAqB;KAC9E,MAAM,gBAAgB,eAAe,IAAI,MAAM;KAC/C,IAAI,CAAC,eACD,MAAM,gBAAgB,mCAAmC,OAAO,kBAAkB;KAQtF,OANe,uBAAuB;MAClC;MACA;MACA,WAAW,QAAQ;MACnB;KACJ,CACY,CAAC,CAAC,wBAAwB,aAAa,UAAU,mBAAmB;IACpF;IACA,MAAM,sBAAsB,KAAK;KAC7B,IAAI,CAAC,aAAa;KAClB,MAAM,UAAU,MAAM,YAAY,iBAAiB,GAAG;KACtD,IAAI,CAAC,SAAS;KACd,MAAM,oBAAoB,oBAAoB,OAAO;KACrD,MAAM,WAAW,QAAQ,iBAAiB;KAC1C,OAAO,kBAAkB;IAC7B;IACA,QAAQ;KACJ,MAAM,MAAM,wBAAwB,CAAC,GAAG;MACpC,IAAI,CAAC,aACD,MAAM,IAAI,MAAM,4CAA4C;MAEhE,MAAM,UAAU,MAAM,YAAY,OAAO,EACrC,qBAAqB,sBAAsB,oBAC/C,CAAC;MACD,MAAM,oBAAoB,oBAAoB,OAAO;MACrD,MAAM,WAAW,QAAQ,iBAAiB;MAC1C,OAAO,kBAAkB;KAC7B;KACA,MAAM,oBAAoB;MACtB,IAAI,CAAC,wBACD,MAAM,IAAI,MAAM,mDAAmD;MAEvE,IAAI,OAAO,WAAW,aAClB,MAAM,IAAI,MAAM,wDAAwD;MAE5E,MAAM,oBAAoB,MAAM,+BAA+B;MAC/D,MAAM,WAAW,QAAQ,iBAAiB;MAC1C,OAAO,kBAAkB;KAC7B;KACA,MAAM,YAAY,wBAAwB,CAAC,GAAG;MAC1C,MAAM,oBAAoB,MAAM,mBAAmB,qBAAqB;MACxE,IAAI,sBAAsB,UAAU,KAAA,KAAa,QAAQ,OACrD,cAAc;MAElB,MAAM,WAAW,QAAQ,iBAAiB;MAC1C,OAAO,kBAAkB;KAC7B;IACJ;GACJ;EACJ;EACA,MAAM,qBAAqB;GACvB,MAAM,2BAAW,IAAI,IAAmC;GACxD,IAAI,eAAe,QAAQ,OAAO;IAC9B,MAAM,UAAU,MAAM,mBAAmB;IACzC,SAAS,IAAI,QAAQ,WAAW,QAAQ,OAAO;GACnD;GACA,IAAI,aACA,KAAK,MAAM,gBAAgB,MAAM,YAAY,gBAAgB,GAAG;IAC5D,MAAM,UAAU,oBAAoB,YAAY;IAChD,SAAS,IAAI,QAAQ,WAAW,QAAQ,OAAO;GACnD;GAEJ,IAAI,0BAA0B,OAAO,WAAW,aAAa;IACzD,MAAM,UAAU,MAAM,+BAA+B;IACrD,SAAS,IAAI,QAAQ,WAAW,QAAQ,OAAO;GACnD;GACA,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC;EAChC;EACA,MAAM,UAAU;GACZ,eAAe,MAAM;GACrB,MAAM,aAAa,QAAQ;GAC3B,wBAAwB,QAAQ;EACpC;CACJ;AACJ;AAEA,SAAgB,kCACZ,SACgE;CAChE,QAAQ,YAAY,0CAA0C,SAAS,OAAO;AAClF"}