@rawdash/connector-salesforce 0.0.1

package/README.md

@@ -0,0 +1,157 @@
+<!-- This file is generated from connector metadata by scripts/generate-connector-docs.ts. Do not edit by hand. -->
+
+# @rawdash/connector-salesforce
+
+[![npm version](https://img.shields.io/npm/v/@rawdash/connector-salesforce)](https://www.npmjs.com/package/@rawdash/connector-salesforce)
+[![license](https://img.shields.io/npm/l/@rawdash/connector-salesforce)](https://github.com/rawdash/rawdash/blob/main/LICENSE)
+
+Sync opportunities, opportunity stage-change events, accounts, leads, and users from a Salesforce org for pipeline, forecast, and quota-attainment dashboards.
+
+## Install
+
+```sh
+npm install @rawdash/connector-salesforce
+```
+
+## Authentication
+
+OAuth 2.0 with a refresh token issued by a Salesforce Connected App. Requires the consumer key/secret, a refresh token, and the org instance URL.
+
+1. In Salesforce, go to Setup → App Manager → New Connected App and check "Enable OAuth Settings".
+2. Set the callback URL to a URL you control (e.g. https://localhost:8080/callback); it only has to be reachable when minting the initial refresh token.
+3. Under Selected OAuth Scopes add "Access and manage your data (api)" and "Perform requests on your behalf at any time (refresh_token, offline_access)".
+4. Save, then copy the Consumer Key (client ID) and Consumer Secret from the connected app detail page.
+5. Authorize via https://login.salesforce.com/services/oauth2/authorize?response_type=code&client_id=<KEY>&redirect_uri=<URL> and exchange the resulting code at /services/oauth2/token to obtain a refresh token and the org instance_url.
+6. Use the org instance URL from the token response (e.g. https://mycompany.my.salesforce.com), not login.salesforce.com.
+7. Store the consumer secret and refresh token as rawdash secrets and reference them as secret("SF_CLIENT_SECRET") and secret("SF_REFRESH_TOKEN").
+
+## Configuration
+
+| Field          | Type   | Required | Description                                                                                                                                                                       |
+| -------------- | ------ | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `clientId`     | string | Yes      | Consumer key (client ID) of the Salesforce Connected App used for OAuth 2.0 refresh-token exchange.                                                                               |
+| `clientSecret` | secret | Yes      | Consumer secret of the Salesforce Connected App.                                                                                                                                  |
+| `refreshToken` | secret | Yes      | OAuth 2.0 refresh token obtained from the Connected App authorization code flow. Stored as a secret.                                                                              |
+| `instanceUrl`  | string | Yes      | Salesforce instance URL, e.g. https://mycompany.my.salesforce.com. Returned alongside the refresh token from the OAuth flow; never use the generic login.salesforce.com URL here. |
+| `apiVersion`   | string | No       | Salesforce REST API version, e.g. "59.0". Defaults to 59.0; bump to pick up newer SOQL semantics.                                                                                 |
+| `resources`    | array  | No       | Which Salesforce resources to sync. Omit to sync all resources. The Connected App only needs read access for the resources listed here.                                           |
+
+## Resources
+
+- **`salesforce_user`** _(entity)_ - Salesforce users, keyed by user id, with name, email, and active state. Used to attribute opportunities, accounts, and stage changes to owners.
+  - Endpoint: `GET /services/data/v{version}/query (SOQL: FROM User)`
+  - Users are backfilled in full on every run; the table is small.
+  - `name`: Full name of the user.
+  - `email`: User email address.
+  - `isActive`: Whether the user is active.
+- **`salesforce_account`** _(entity)_ - Accounts (companies), keyed by account id, with industry, annual revenue, owner, and creation time.
+  - Endpoint: `GET /services/data/v{version}/query (SOQL: FROM Account)`
+  - Upserts by id; incremental syncs filter on LastModifiedDate.
+  - `name`: Account name.
+  - `industry`: Industry classification.
+  - `annualRevenue`: Annual revenue in the org currency.
+  - `ownerId`: User id of the account owner.
+  - `createdAt`: Account creation time (Unix ms).
+- **`salesforce_lead`** _(entity)_ - Leads, keyed by lead id, with email, status, source, and conversion time.
+  - Endpoint: `GET /services/data/v{version}/query (SOQL: FROM Lead)`
+  - Upserts by id; incremental syncs filter on LastModifiedDate.
+  - `email`: Lead email address.
+  - `status`: Lead status.
+  - `source`: Lead source (LeadSource).
+  - `convertedAt`: When the lead was converted (Unix ms), if any.
+  - `createdAt`: Lead creation time (Unix ms).
+- **`salesforce_opportunity`** _(entity)_ - Opportunities, keyed by opportunity id, with stage, amount, close date, owner, probability, forecast category, and closed/won flags.
+  - Endpoint: `GET /services/data/v{version}/query (SOQL: FROM Opportunity)`
+  - Upserts by id; incremental syncs filter on LastModifiedDate.
+  - `name`: Opportunity name.
+  - `stage`: Current StageName.
+  - `amount`: Opportunity amount in org currency.
+  - `closeDate`: Expected close date (Unix ms).
+  - `ownerId`: User id of the opportunity owner.
+  - `probability`: Win probability percentage.
+  - `forecastCategory`: Forecast category name.
+  - `isClosed`: Whether the opportunity is closed.
+  - `isWon`: Whether the opportunity is won.
+  - `createdAt`: Opportunity creation time (Unix ms).
+- **`salesforce_opportunity_stage_change`** _(event)_ - Opportunity stage transitions derived from OpportunityFieldHistory rows where Field = StageName. One event per transition, timestamped at the change CreatedDate.
+  - Endpoint: `GET /services/data/v{version}/query (SOQL: FROM OpportunityFieldHistory WHERE Field = 'StageName')`
+  - Stage-change events are immutable; their scope is only cleared on a full sync so an incremental window does not drop history outside its range.
+  - `historyId`: OpportunityFieldHistory row id.
+  - `opportunityId`: Id of the opportunity that changed stage.
+  - `fromStage`: Previous StageName (OldValue).
+  - `toStage`: New StageName (NewValue).
+  - `actorId`: User id who made the change (CreatedById).
+
+## Example
+
+```ts
+import {
+  defineConfig,
+  defineDashboard,
+  defineMetric,
+  secret,
+} from '@rawdash/core';
+
+const salesforce = {
+  name: 'salesforce',
+  connectorId: 'salesforce',
+  config: {
+    clientId: '3MVG9_consumerKey_...',
+    clientSecret: secret('SF_CLIENT_SECRET'),
+    refreshToken: secret('SF_REFRESH_TOKEN'),
+    instanceUrl: 'https://mycompany.my.salesforce.com',
+  },
+};
+
+export default defineConfig({
+  connectors: [salesforce],
+  dashboards: {
+    sales: defineDashboard({
+      widgets: {
+        open_pipeline: {
+          kind: 'stat',
+          title: 'Open pipeline value',
+          metric: defineMetric({
+            connector: salesforce,
+            shape: 'entity',
+            entityType: 'salesforce_opportunity',
+            field: 'amount',
+            fn: 'sum',
+            filter: [{ field: 'isClosed', op: 'eq', value: false }],
+          }),
+        },
+        win_rate: {
+          kind: 'stat',
+          title: 'Won opportunities',
+          metric: defineMetric({
+            connector: salesforce,
+            shape: 'entity',
+            entityType: 'salesforce_opportunity',
+            fn: 'count',
+            filter: [{ field: 'isWon', op: 'eq', value: true }],
+          }),
+        },
+      },
+    }),
+  },
+});
+```
+
+## Rate limits
+
+Salesforce caps total API calls per org per 24 hours. Responses include a Sforce-Limit-Info header (api-usage=NN/MM); size sync intervals so the daily budget is not exhausted. The shared HTTP client retries on 429 with Retry-After.
+
+## Limitations
+
+- Custom objects are out of scope for v1; only the standard objects listed above are synced.
+- Salesforce Marketing Cloud is tracked under a separate connector.
+
+## Links
+
+- [Rawdash docs](https://rawdash.dev/docs/connectors/)
+- [Salesforce API docs](https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/)
+- [GitHub](https://github.com/rawdash/rawdash)
+
+## License
+
+Apache-2.0

package/dist/index.d.ts

@@ -0,0 +1,321 @@
+import { BaseConnector, ConnectorContext, SyncOptions, StorageHandle, SyncResult, ConnectorDoc } from '@rawdash/core';
+import { z } from 'zod';
+
+declare const configFields: z.ZodObject<{
+    clientId: z.ZodString;
+    clientSecret: z.ZodObject<{
+        $secret: z.ZodString;
+    }, z.core.$strip>;
+    refreshToken: z.ZodObject<{
+        $secret: z.ZodString;
+    }, z.core.$strip>;
+    instanceUrl: z.ZodString;
+    apiVersion: z.ZodOptional<z.ZodString>;
+    resources: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        users: "users";
+        accounts: "accounts";
+        leads: "leads";
+        opportunities: "opportunities";
+        opportunity_events: "opportunity_events";
+    }>>>;
+}, z.core.$strip>;
+declare const doc: ConnectorDoc;
+interface SalesforceSettings {
+    instanceUrl: string;
+    apiVersion?: string;
+    resources?: readonly SalesforceResource[];
+}
+declare const salesforceCredentials: {
+    clientId: {
+        description: string;
+        auth: "required";
+    };
+    clientSecret: {
+        description: string;
+        auth: "required";
+    };
+    refreshToken: {
+        description: string;
+        auth: "required";
+    };
+};
+type SalesforceCredentials = typeof salesforceCredentials;
+declare const PHASE_ORDER: readonly ["users", "accounts", "leads", "opportunities", "opportunity_events"];
+type SalesforcePhase = (typeof PHASE_ORDER)[number];
+type SalesforceResource = SalesforcePhase;
+declare class SalesforceConnector extends BaseConnector<SalesforceSettings, SalesforceCredentials> {
+    static readonly id = "salesforce";
+    static readonly resources: {
+        readonly salesforce_user: {
+            readonly shape: "entity";
+            readonly description: "Salesforce users, keyed by user id, with name, email, and active state. Used to attribute opportunities, accounts, and stage changes to owners.";
+            readonly endpoint: "GET /services/data/v{version}/query (SOQL: FROM User)";
+            readonly notes: "Users are backfilled in full on every run; the table is small.";
+            readonly fields: [{
+                readonly name: "name";
+                readonly description: "Full name of the user.";
+            }, {
+                readonly name: "email";
+                readonly description: "User email address.";
+            }, {
+                readonly name: "isActive";
+                readonly description: "Whether the user is active.";
+            }];
+            readonly responses: {
+                readonly oauth_token: z.ZodObject<{
+                    access_token: z.ZodString;
+                    instance_url: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                readonly users: z.ZodArray<z.ZodObject<{
+                    Id: z.ZodString;
+                    Name: z.ZodNullable<z.ZodString>;
+                    Email: z.ZodNullable<z.ZodString>;
+                    IsActive: z.ZodBoolean;
+                }, z.core.$strip>>;
+            };
+        };
+        readonly salesforce_account: {
+            readonly shape: "entity";
+            readonly description: "Accounts (companies), keyed by account id, with industry, annual revenue, owner, and creation time.";
+            readonly endpoint: "GET /services/data/v{version}/query (SOQL: FROM Account)";
+            readonly notes: "Upserts by id; incremental syncs filter on LastModifiedDate.";
+            readonly fields: [{
+                readonly name: "name";
+                readonly description: "Account name.";
+            }, {
+                readonly name: "industry";
+                readonly description: "Industry classification.";
+            }, {
+                readonly name: "annualRevenue";
+                readonly description: "Annual revenue in the org currency.";
+            }, {
+                readonly name: "ownerId";
+                readonly description: "User id of the account owner.";
+            }, {
+                readonly name: "createdAt";
+                readonly description: "Account creation time (Unix ms).";
+            }];
+            readonly responses: {
+                readonly accounts: z.ZodArray<z.ZodObject<{
+                    Id: z.ZodString;
+                    Name: z.ZodNullable<z.ZodString>;
+                    Industry: z.ZodNullable<z.ZodString>;
+                    AnnualRevenue: z.ZodNullable<z.ZodNumber>;
+                    OwnerId: z.ZodNullable<z.ZodString>;
+                    CreatedDate: z.ZodString;
+                    LastModifiedDate: z.ZodString;
+                }, z.core.$strip>>;
+            };
+        };
+        readonly salesforce_lead: {
+            readonly shape: "entity";
+            readonly description: "Leads, keyed by lead id, with email, status, source, and conversion time.";
+            readonly endpoint: "GET /services/data/v{version}/query (SOQL: FROM Lead)";
+            readonly notes: "Upserts by id; incremental syncs filter on LastModifiedDate.";
+            readonly fields: [{
+                readonly name: "email";
+                readonly description: "Lead email address.";
+            }, {
+                readonly name: "status";
+                readonly description: "Lead status.";
+            }, {
+                readonly name: "source";
+                readonly description: "Lead source (LeadSource).";
+            }, {
+                readonly name: "convertedAt";
+                readonly description: "When the lead was converted (Unix ms), if any.";
+            }, {
+                readonly name: "createdAt";
+                readonly description: "Lead creation time (Unix ms).";
+            }];
+            readonly responses: {
+                readonly leads: z.ZodArray<z.ZodObject<{
+                    Id: z.ZodString;
+                    Email: z.ZodNullable<z.ZodString>;
+                    Status: z.ZodNullable<z.ZodString>;
+                    LeadSource: z.ZodNullable<z.ZodString>;
+                    ConvertedDate: z.ZodNullable<z.ZodString>;
+                    CreatedDate: z.ZodString;
+                    LastModifiedDate: z.ZodString;
+                }, z.core.$strip>>;
+            };
+        };
+        readonly salesforce_opportunity: {
+            readonly shape: "entity";
+            readonly description: "Opportunities, keyed by opportunity id, with stage, amount, close date, owner, probability, forecast category, and closed/won flags.";
+            readonly endpoint: "GET /services/data/v{version}/query (SOQL: FROM Opportunity)";
+            readonly notes: "Upserts by id; incremental syncs filter on LastModifiedDate.";
+            readonly fields: [{
+                readonly name: "name";
+                readonly description: "Opportunity name.";
+            }, {
+                readonly name: "stage";
+                readonly description: "Current StageName.";
+            }, {
+                readonly name: "amount";
+                readonly description: "Opportunity amount in org currency.";
+            }, {
+                readonly name: "closeDate";
+                readonly description: "Expected close date (Unix ms).";
+            }, {
+                readonly name: "ownerId";
+                readonly description: "User id of the opportunity owner.";
+            }, {
+                readonly name: "probability";
+                readonly description: "Win probability percentage.";
+            }, {
+                readonly name: "forecastCategory";
+                readonly description: "Forecast category name.";
+            }, {
+                readonly name: "isClosed";
+                readonly description: "Whether the opportunity is closed.";
+            }, {
+                readonly name: "isWon";
+                readonly description: "Whether the opportunity is won.";
+            }, {
+                readonly name: "createdAt";
+                readonly description: "Opportunity creation time (Unix ms).";
+            }];
+            readonly responses: {
+                readonly opportunities: z.ZodArray<z.ZodObject<{
+                    Id: z.ZodString;
+                    Name: z.ZodNullable<z.ZodString>;
+                    StageName: z.ZodNullable<z.ZodString>;
+                    Amount: z.ZodNullable<z.ZodNumber>;
+                    CloseDate: z.ZodNullable<z.ZodString>;
+                    OwnerId: z.ZodNullable<z.ZodString>;
+                    Probability: z.ZodNullable<z.ZodNumber>;
+                    ForecastCategoryName: z.ZodNullable<z.ZodString>;
+                    IsClosed: z.ZodBoolean;
+                    IsWon: z.ZodBoolean;
+                    CreatedDate: z.ZodString;
+                    LastModifiedDate: z.ZodString;
+                }, z.core.$strip>>;
+            };
+        };
+        readonly salesforce_opportunity_stage_change: {
+            readonly shape: "event";
+            readonly description: "Opportunity stage transitions derived from OpportunityFieldHistory rows where Field = StageName. One event per transition, timestamped at the change CreatedDate.";
+            readonly endpoint: "GET /services/data/v{version}/query (SOQL: FROM OpportunityFieldHistory WHERE Field = 'StageName')";
+            readonly notes: "Stage-change events are immutable; their scope is only cleared on a full sync so an incremental window does not drop history outside its range.";
+            readonly fields: [{
+                readonly name: "historyId";
+                readonly description: "OpportunityFieldHistory row id.";
+            }, {
+                readonly name: "opportunityId";
+                readonly description: "Id of the opportunity that changed stage.";
+            }, {
+                readonly name: "fromStage";
+                readonly description: "Previous StageName (OldValue).";
+            }, {
+                readonly name: "toStage";
+                readonly description: "New StageName (NewValue).";
+            }, {
+                readonly name: "actorId";
+                readonly description: "User id who made the change (CreatedById).";
+            }];
+            readonly responses: {
+                readonly opportunity_events: z.ZodArray<z.ZodObject<{
+                    Id: z.ZodString;
+                    OpportunityId: z.ZodString;
+                    Field: z.ZodString;
+                    OldValue: z.ZodNullable<z.ZodString>;
+                    NewValue: z.ZodNullable<z.ZodString>;
+                    CreatedDate: z.ZodString;
+                    CreatedById: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+        };
+    };
+    static readonly schemas: {
+        readonly oauth_token: z.ZodObject<{
+            access_token: z.ZodString;
+            instance_url: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        readonly users: z.ZodArray<z.ZodObject<{
+            Id: z.ZodString;
+            Name: z.ZodNullable<z.ZodString>;
+            Email: z.ZodNullable<z.ZodString>;
+            IsActive: z.ZodBoolean;
+        }, z.core.$strip>>;
+    } & {
+        readonly accounts: z.ZodArray<z.ZodObject<{
+            Id: z.ZodString;
+            Name: z.ZodNullable<z.ZodString>;
+            Industry: z.ZodNullable<z.ZodString>;
+            AnnualRevenue: z.ZodNullable<z.ZodNumber>;
+            OwnerId: z.ZodNullable<z.ZodString>;
+            CreatedDate: z.ZodString;
+            LastModifiedDate: z.ZodString;
+        }, z.core.$strip>>;
+    } & {
+        readonly leads: z.ZodArray<z.ZodObject<{
+            Id: z.ZodString;
+            Email: z.ZodNullable<z.ZodString>;
+            Status: z.ZodNullable<z.ZodString>;
+            LeadSource: z.ZodNullable<z.ZodString>;
+            ConvertedDate: z.ZodNullable<z.ZodString>;
+            CreatedDate: z.ZodString;
+            LastModifiedDate: z.ZodString;
+        }, z.core.$strip>>;
+    } & {
+        readonly opportunities: z.ZodArray<z.ZodObject<{
+            Id: z.ZodString;
+            Name: z.ZodNullable<z.ZodString>;
+            StageName: z.ZodNullable<z.ZodString>;
+            Amount: z.ZodNullable<z.ZodNumber>;
+            CloseDate: z.ZodNullable<z.ZodString>;
+            OwnerId: z.ZodNullable<z.ZodString>;
+            Probability: z.ZodNullable<z.ZodNumber>;
+            ForecastCategoryName: z.ZodNullable<z.ZodString>;
+            IsClosed: z.ZodBoolean;
+            IsWon: z.ZodBoolean;
+            CreatedDate: z.ZodString;
+            LastModifiedDate: z.ZodString;
+        }, z.core.$strip>>;
+    } & {
+        readonly opportunity_events: z.ZodArray<z.ZodObject<{
+            Id: z.ZodString;
+            OpportunityId: z.ZodString;
+            Field: z.ZodString;
+            OldValue: z.ZodNullable<z.ZodString>;
+            NewValue: z.ZodNullable<z.ZodString>;
+            CreatedDate: z.ZodString;
+            CreatedById: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+    } & Readonly<Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+    static create(input: unknown, ctx?: ConnectorContext): SalesforceConnector;
+    readonly id = "salesforce";
+    readonly credentials: {
+        clientId: {
+            description: string;
+            auth: "required";
+        };
+        clientSecret: {
+            description: string;
+            auth: "required";
+        };
+        refreshToken: {
+            description: string;
+            auth: "required";
+        };
+    };
+    private accessToken;
+    private apiVersion;
+    private baseUrl;
+    private refreshAccessToken;
+    private getAccessToken;
+    private apiGet;
+    private sanitizeNextRecordsUrl;
+    private fetchPage;
+    private writeUsers;
+    private writeAccounts;
+    private writeLeads;
+    private writeOpportunities;
+    private writeOpportunityEvents;
+    private writePhase;
+    private clearScopeOnFirstPage;
+    sync(options: SyncOptions, storage: StorageHandle, signal?: AbortSignal): Promise<SyncResult>;
+}
+
+export { SalesforceConnector, type SalesforceResource, type SalesforceSettings, configFields, SalesforceConnector as default, doc };

package/dist/index.js

@@ -0,0 +1,583 @@
+// ../../connector-shared/dist/index.js
+var HTTP_CLIENT_VERSION = "0.0.0";
+var DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;
+function connectorUserAgent(connectorId) {
+  return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;
+}
+
+// src/salesforce.ts
+import {
+  BaseConnector,
+  defineConfigFields,
+  defineConnectorDoc,
+  defineResources,
+  makeChunkedCursorGuard,
+  paginateChunked,
+  schemasFromResources,
+  selectActivePhases
+} from "@rawdash/core";
+import { z } from "zod";
+var configFields = defineConfigFields(
+  z.object({
+    clientId: z.string().min(1).meta({
+      label: "Connected app consumer key",
+      description: "Consumer key (client ID) of the Salesforce Connected App used for OAuth 2.0 refresh-token exchange.",
+      placeholder: "3MVG9..."
+    }),
+    clientSecret: z.object({ $secret: z.string().min(1) }).meta({
+      label: "Connected app consumer secret",
+      description: "Consumer secret of the Salesforce Connected App.",
+      placeholder: "SF_CLIENT_SECRET",
+      secret: true
+    }),
+    refreshToken: z.object({ $secret: z.string().min(1) }).meta({
+      label: "OAuth refresh token",
+      description: "OAuth 2.0 refresh token obtained from the Connected App authorization code flow. Stored as a secret.",
+      placeholder: "SF_REFRESH_TOKEN",
+      secret: true
+    }),
+    instanceUrl: z.string().url().meta({
+      label: "Instance URL",
+      description: "Salesforce instance URL, e.g. https://mycompany.my.salesforce.com. Returned alongside the refresh token from the OAuth flow; never use the generic login.salesforce.com URL here.",
+      placeholder: "https://mycompany.my.salesforce.com"
+    }),
+    apiVersion: z.string().regex(/^\d+\.\d+$/).optional().meta({
+      label: "REST API version",
+      description: 'Salesforce REST API version, e.g. "59.0". Defaults to 59.0; bump to pick up newer SOQL semantics.',
+      placeholder: "59.0"
+    }),
+    resources: z.array(
+      z.enum([
+        "users",
+        "accounts",
+        "leads",
+        "opportunities",
+        "opportunity_events"
+      ])
+    ).nonempty().optional().meta({
+      label: "Resources",
+      description: "Which Salesforce resources to sync. Omit to sync all resources. The Connected App only needs read access for the resources listed here."
+    })
+  })
+);
+var doc = defineConnectorDoc({
+  displayName: "Salesforce",
+  category: "sales",
+  brandColor: "#00A1E0",
+  tagline: "Sync opportunities, opportunity stage-change events, accounts, leads, and users from a Salesforce org for pipeline, forecast, and quota-attainment dashboards.",
+  vendor: {
+    name: "Salesforce",
+    apiDocs: "https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/",
+    website: "https://www.salesforce.com"
+  },
+  auth: {
+    summary: "OAuth 2.0 with a refresh token issued by a Salesforce Connected App. Requires the consumer key/secret, a refresh token, and the org instance URL.",
+    setup: [
+      'In Salesforce, go to Setup \u2192 App Manager \u2192 New Connected App and check "Enable OAuth Settings".',
+      "Set the callback URL to a URL you control (e.g. https://localhost:8080/callback); it only has to be reachable when minting the initial refresh token.",
+      'Under Selected OAuth Scopes add "Access and manage your data (api)" and "Perform requests on your behalf at any time (refresh_token, offline_access)".',
+      "Save, then copy the Consumer Key (client ID) and Consumer Secret from the connected app detail page.",
+      "Authorize via https://login.salesforce.com/services/oauth2/authorize?response_type=code&client_id=<KEY>&redirect_uri=<URL> and exchange the resulting code at /services/oauth2/token to obtain a refresh token and the org instance_url.",
+      "Use the org instance URL from the token response (e.g. https://mycompany.my.salesforce.com), not login.salesforce.com.",
+      'Store the consumer secret and refresh token as rawdash secrets and reference them as secret("SF_CLIENT_SECRET") and secret("SF_REFRESH_TOKEN").'
+    ]
+  },
+  rateLimit: "Salesforce caps total API calls per org per 24 hours. Responses include a Sforce-Limit-Info header (api-usage=NN/MM); size sync intervals so the daily budget is not exhausted. The shared HTTP client retries on 429 with Retry-After.",
+  limitations: [
+    "Custom objects are out of scope for v1; only the standard objects listed above are synced.",
+    "Salesforce Marketing Cloud is tracked under a separate connector."
+  ]
+});
+var salesforceCredentials = {
+  clientId: {
+    description: "Salesforce Connected App consumer key (client ID)",
+    auth: "required"
+  },
+  clientSecret: {
+    description: "Salesforce Connected App consumer secret",
+    auth: "required"
+  },
+  refreshToken: {
+    description: "Salesforce OAuth 2.0 refresh token",
+    auth: "required"
+  }
+};
+var PHASE_ORDER = [
+  "users",
+  "accounts",
+  "leads",
+  "opportunities",
+  "opportunity_events"
+];
+var isSalesforceSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);
+var ENTITY_TYPE_BY_PHASE = {
+  users: "salesforce_user",
+  accounts: "salesforce_account",
+  leads: "salesforce_lead",
+  opportunities: "salesforce_opportunity"
+};
+var STAGE_CHANGE_EVENT = "salesforce_opportunity_stage_change";
+var DEFAULT_API_VERSION = "59.0";
+var idString = z.string().min(1);
+var isoDate = z.string().min(1);
+var oauthTokenSchema = z.object({
+  access_token: z.string().min(1),
+  instance_url: z.string().optional()
+});
+var userSchema = z.object({
+  Id: idString,
+  Name: z.string().nullable(),
+  Email: z.string().nullable(),
+  IsActive: z.boolean()
+});
+var accountSchema = z.object({
+  Id: idString,
+  Name: z.string().nullable(),
+  Industry: z.string().nullable(),
+  AnnualRevenue: z.number().nullable(),
+  OwnerId: z.string().nullable(),
+  CreatedDate: isoDate,
+  LastModifiedDate: isoDate
+});
+var leadSchema = z.object({
+  Id: idString,
+  Email: z.string().nullable(),
+  Status: z.string().nullable(),
+  LeadSource: z.string().nullable(),
+  ConvertedDate: z.string().nullable(),
+  CreatedDate: isoDate,
+  LastModifiedDate: isoDate
+});
+var opportunitySchema = z.object({
+  Id: idString,
+  Name: z.string().nullable(),
+  StageName: z.string().nullable(),
+  Amount: z.number().nullable(),
+  CloseDate: z.string().nullable(),
+  OwnerId: z.string().nullable(),
+  Probability: z.number().nullable(),
+  ForecastCategoryName: z.string().nullable(),
+  IsClosed: z.boolean(),
+  IsWon: z.boolean(),
+  CreatedDate: isoDate,
+  LastModifiedDate: isoDate
+});
+var fieldHistorySchema = z.object({
+  Id: idString,
+  OpportunityId: idString,
+  Field: z.string(),
+  OldValue: z.string().nullable(),
+  NewValue: z.string().nullable(),
+  CreatedDate: isoDate,
+  CreatedById: z.string().nullable()
+});
+var salesforceResources = defineResources({
+  salesforce_user: {
+    shape: "entity",
+    description: "Salesforce users, keyed by user id, with name, email, and active state. Used to attribute opportunities, accounts, and stage changes to owners.",
+    endpoint: "GET /services/data/v{version}/query (SOQL: FROM User)",
+    notes: "Users are backfilled in full on every run; the table is small.",
+    fields: [
+      { name: "name", description: "Full name of the user." },
+      { name: "email", description: "User email address." },
+      { name: "isActive", description: "Whether the user is active." }
+    ],
+    responses: {
+      oauth_token: oauthTokenSchema,
+      users: z.array(userSchema)
+    }
+  },
+  salesforce_account: {
+    shape: "entity",
+    description: "Accounts (companies), keyed by account id, with industry, annual revenue, owner, and creation time.",
+    endpoint: "GET /services/data/v{version}/query (SOQL: FROM Account)",
+    notes: "Upserts by id; incremental syncs filter on LastModifiedDate.",
+    fields: [
+      { name: "name", description: "Account name." },
+      { name: "industry", description: "Industry classification." },
+      {
+        name: "annualRevenue",
+        description: "Annual revenue in the org currency."
+      },
+      { name: "ownerId", description: "User id of the account owner." },
+      {
+        name: "createdAt",
+        description: "Account creation time (Unix ms)."
+      }
+    ],
+    responses: { accounts: z.array(accountSchema) }
+  },
+  salesforce_lead: {
+    shape: "entity",
+    description: "Leads, keyed by lead id, with email, status, source, and conversion time.",
+    endpoint: "GET /services/data/v{version}/query (SOQL: FROM Lead)",
+    notes: "Upserts by id; incremental syncs filter on LastModifiedDate.",
+    fields: [
+      { name: "email", description: "Lead email address." },
+      { name: "status", description: "Lead status." },
+      { name: "source", description: "Lead source (LeadSource)." },
+      {
+        name: "convertedAt",
+        description: "When the lead was converted (Unix ms), if any."
+      },
+      { name: "createdAt", description: "Lead creation time (Unix ms)." }
+    ],
+    responses: { leads: z.array(leadSchema) }
+  },
+  salesforce_opportunity: {
+    shape: "entity",
+    description: "Opportunities, keyed by opportunity id, with stage, amount, close date, owner, probability, forecast category, and closed/won flags.",
+    endpoint: "GET /services/data/v{version}/query (SOQL: FROM Opportunity)",
+    notes: "Upserts by id; incremental syncs filter on LastModifiedDate.",
+    fields: [
+      { name: "name", description: "Opportunity name." },
+      { name: "stage", description: "Current StageName." },
+      { name: "amount", description: "Opportunity amount in org currency." },
+      { name: "closeDate", description: "Expected close date (Unix ms)." },
+      { name: "ownerId", description: "User id of the opportunity owner." },
+      { name: "probability", description: "Win probability percentage." },
+      {
+        name: "forecastCategory",
+        description: "Forecast category name."
+      },
+      { name: "isClosed", description: "Whether the opportunity is closed." },
+      { name: "isWon", description: "Whether the opportunity is won." },
+      {
+        name: "createdAt",
+        description: "Opportunity creation time (Unix ms)."
+      }
+    ],
+    responses: { opportunities: z.array(opportunitySchema) }
+  },
+  salesforce_opportunity_stage_change: {
+    shape: "event",
+    description: "Opportunity stage transitions derived from OpportunityFieldHistory rows where Field = StageName. One event per transition, timestamped at the change CreatedDate.",
+    endpoint: "GET /services/data/v{version}/query (SOQL: FROM OpportunityFieldHistory WHERE Field = 'StageName')",
+    notes: "Stage-change events are immutable; their scope is only cleared on a full sync so an incremental window does not drop history outside its range.",
+    fields: [
+      {
+        name: "historyId",
+        description: "OpportunityFieldHistory row id."
+      },
+      {
+        name: "opportunityId",
+        description: "Id of the opportunity that changed stage."
+      },
+      { name: "fromStage", description: "Previous StageName (OldValue)." },
+      { name: "toStage", description: "New StageName (NewValue)." },
+      {
+        name: "actorId",
+        description: "User id who made the change (CreatedById)."
+      }
+    ],
+    responses: { opportunity_events: z.array(fieldHistorySchema) }
+  }
+});
+var PHASE_SOQL = {
+  users: "SELECT Id, Name, Email, IsActive FROM User",
+  accounts: "SELECT Id, Name, Industry, AnnualRevenue, OwnerId, CreatedDate, LastModifiedDate FROM Account",
+  leads: "SELECT Id, Email, Status, LeadSource, ConvertedDate, CreatedDate, LastModifiedDate FROM Lead",
+  opportunities: "SELECT Id, Name, StageName, Amount, CloseDate, OwnerId, Probability, ForecastCategoryName, IsClosed, IsWon, CreatedDate, LastModifiedDate FROM Opportunity",
+  opportunity_events: "SELECT Id, OpportunityId, Field, OldValue, NewValue, CreatedDate, CreatedById FROM OpportunityFieldHistory WHERE Field = 'StageName'"
+};
+var PHASE_TIMESTAMP = {
+  users: "",
+  accounts: "LastModifiedDate",
+  leads: "LastModifiedDate",
+  opportunities: "LastModifiedDate",
+  opportunity_events: "CreatedDate"
+};
+function soqlDateLiteral(iso) {
+  const d = new Date(iso);
+  if (Number.isNaN(d.getTime())) {
+    return iso;
+  }
+  return `${d.toISOString().replace(/\.\d{3}Z$/, "Z")}`;
+}
+function buildPhaseSoql(phase, since) {
+  const base = PHASE_SOQL[phase];
+  const timestampField = PHASE_TIMESTAMP[phase];
+  if (!timestampField || !since) {
+    return timestampField ? `${base} ORDER BY ${timestampField} ASC` : `${base} ORDER BY Id ASC`;
+  }
+  const literal = soqlDateLiteral(since);
+  const connector = base.includes("WHERE") ? "AND" : "WHERE";
+  return `${base} ${connector} ${timestampField} >= ${literal} ORDER BY ${timestampField} ASC`;
+}
+function parseDateMs(value) {
+  if (value === null || value === void 0 || value === "") {
+    return null;
+  }
+  const ms = Date.parse(value);
+  return Number.isFinite(ms) ? ms : null;
+}
+var SalesforceConnector = class _SalesforceConnector extends BaseConnector {
+  static id = "salesforce";
+  static resources = salesforceResources;
+  static schemas = schemasFromResources(salesforceResources);
+  static create(input, ctx) {
+    const parsed = configFields.parse(input);
+    return new _SalesforceConnector(
+      {
+        instanceUrl: parsed.instanceUrl,
+        apiVersion: parsed.apiVersion,
+        resources: parsed.resources
+      },
+      {
+        clientId: parsed.clientId,
+        clientSecret: parsed.clientSecret,
+        refreshToken: parsed.refreshToken
+      },
+      ctx
+    );
+  }
+  id = "salesforce";
+  credentials = salesforceCredentials;
+  accessToken = null;
+  apiVersion() {
+    return this.settings.apiVersion ?? DEFAULT_API_VERSION;
+  }
+  baseUrl() {
+    return this.settings.instanceUrl.replace(/\/+$/, "");
+  }
+  async refreshAccessToken(signal) {
+    const body = new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: this.creds.clientId,
+      client_secret: this.creds.clientSecret,
+      refresh_token: this.creds.refreshToken
+    }).toString();
+    const res = await this.post(
+      `${this.baseUrl()}/services/oauth2/token`,
+      {
+        resource: "oauth_token",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          "User-Agent": connectorUserAgent("salesforce")
+        },
+        body,
+        signal
+      }
+    );
+    return res.body.access_token;
+  }
+  async getAccessToken(signal) {
+    if (!this.accessToken) {
+      this.accessToken = await this.refreshAccessToken(signal);
+    }
+    return this.accessToken;
+  }
+  async apiGet(pathOrUrl, resource, signal) {
+    const url = pathOrUrl.startsWith("http") ? pathOrUrl : `${this.baseUrl()}${pathOrUrl}`;
+    const token = await this.getAccessToken(signal);
+    return this.get(url, {
+      resource,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/json",
+        "User-Agent": connectorUserAgent("salesforce")
+      },
+      signal
+    });
+  }
+  // Salesforce returns nextRecordsUrl as a path like
+  // "/services/data/v59.0/query/01g...-2000". We pass the path back through
+  // the cursor verbatim; defensively strip the origin if the server ever
+  // returns an absolute URL so the cursor cannot exfiltrate credentials to
+  // an attacker-controlled host.
+  sanitizeNextRecordsUrl(value) {
+    if (!value) {
+      return null;
+    }
+    if (value.startsWith("/services/data/")) {
+      return value;
+    }
+    try {
+      const parsed = new URL(value);
+      if (parsed.pathname.startsWith("/services/data/")) {
+        return parsed.pathname + parsed.search;
+      }
+    } catch {
+    }
+    return null;
+  }
+  async fetchPage(phase, page, options, signal) {
+    let path;
+    if (page) {
+      const safePage = this.sanitizeNextRecordsUrl(page);
+      if (!safePage) {
+        throw new Error(`Invalid Salesforce cursor page: ${page}`);
+      }
+      path = safePage;
+    } else {
+      const soql = buildPhaseSoql(phase, options.since);
+      const url = new URL(
+        `${this.baseUrl()}/services/data/v${this.apiVersion()}/query`
+      );
+      url.searchParams.set("q", soql);
+      path = `${url.pathname}?${url.searchParams.toString()}`;
+    }
+    const res = await this.apiGet(path, phase, signal);
+    return {
+      items: res.body.records,
+      next: res.body.done ? null : this.sanitizeNextRecordsUrl(res.body.nextRecordsUrl)
+    };
+  }
+  // ---------------------------------------------------------------------------
+  // Writers
+  // ---------------------------------------------------------------------------
+  async writeUsers(storage, items) {
+    for (const u of items) {
+      await storage.entity({
+        type: "salesforce_user",
+        id: u.Id,
+        attributes: {
+          name: u.Name,
+          email: u.Email,
+          isActive: u.IsActive
+        },
+        updated_at: 0
+      });
+    }
+  }
+  async writeAccounts(storage, items) {
+    for (const a of items) {
+      await storage.entity({
+        type: "salesforce_account",
+        id: a.Id,
+        attributes: {
+          name: a.Name,
+          industry: a.Industry,
+          annualRevenue: a.AnnualRevenue,
+          ownerId: a.OwnerId,
+          createdAt: parseDateMs(a.CreatedDate)
+        },
+        updated_at: parseDateMs(a.LastModifiedDate) ?? 0
+      });
+    }
+  }
+  async writeLeads(storage, items) {
+    for (const l of items) {
+      await storage.entity({
+        type: "salesforce_lead",
+        id: l.Id,
+        attributes: {
+          email: l.Email,
+          status: l.Status,
+          source: l.LeadSource,
+          convertedAt: parseDateMs(l.ConvertedDate),
+          createdAt: parseDateMs(l.CreatedDate)
+        },
+        updated_at: parseDateMs(l.LastModifiedDate) ?? 0
+      });
+    }
+  }
+  async writeOpportunities(storage, items) {
+    for (const o of items) {
+      await storage.entity({
+        type: "salesforce_opportunity",
+        id: o.Id,
+        attributes: {
+          name: o.Name,
+          stage: o.StageName,
+          amount: o.Amount,
+          closeDate: parseDateMs(o.CloseDate),
+          ownerId: o.OwnerId,
+          probability: o.Probability,
+          forecastCategory: o.ForecastCategoryName,
+          isClosed: o.IsClosed,
+          isWon: o.IsWon,
+          createdAt: parseDateMs(o.CreatedDate)
+        },
+        updated_at: parseDateMs(o.LastModifiedDate) ?? 0
+      });
+    }
+  }
+  async writeOpportunityEvents(storage, items) {
+    for (const h of items) {
+      const ts = parseDateMs(h.CreatedDate);
+      if (ts === null) {
+        continue;
+      }
+      await storage.event({
+        name: STAGE_CHANGE_EVENT,
+        start_ts: ts,
+        end_ts: null,
+        attributes: {
+          historyId: h.Id,
+          opportunityId: h.OpportunityId,
+          fromStage: h.OldValue,
+          toStage: h.NewValue,
+          actorId: h.CreatedById
+        }
+      });
+    }
+  }
+  async writePhase(storage, phase, items) {
+    switch (phase) {
+      case "users":
+        return this.writeUsers(storage, items);
+      case "accounts":
+        return this.writeAccounts(storage, items);
+      case "leads":
+        return this.writeLeads(storage, items);
+      case "opportunities":
+        return this.writeOpportunities(
+          storage,
+          items
+        );
+      case "opportunity_events":
+        return this.writeOpportunityEvents(
+          storage,
+          items
+        );
+    }
+  }
+  async clearScopeOnFirstPage(storage, phase, isFull) {
+    if (phase === "opportunity_events") {
+      if (isFull) {
+        await storage.events([], { names: [STAGE_CHANGE_EVENT] });
+      }
+      return;
+    }
+    if (!isFull) {
+      return;
+    }
+    const entityType = ENTITY_TYPE_BY_PHASE[phase];
+    if (entityType) {
+      await storage.entities([], { types: [entityType] });
+    }
+  }
+  async sync(options, storage, signal) {
+    const cursor = isSalesforceSyncCursor(options.cursor) ? options.cursor : void 0;
+    const isFull = options.mode === "full";
+    const phases = selectActivePhases(
+      (r) => r,
+      PHASE_ORDER,
+      this.settings.resources
+    );
+    return paginateChunked({
+      phases,
+      cursor,
+      signal,
+      logger: this.logger,
+      fetchPage: (phase, page, sig) => this.fetchPage(phase, page, options, sig),
+      writeBatch: async (phase, items, page) => {
+        if (page === null) {
+          await this.clearScopeOnFirstPage(storage, phase, isFull);
+        }
+        await this.writePhase(storage, phase, items);
+      }
+    });
+  }
+};
+
+// src/index.ts
+var index_default = SalesforceConnector;
+export {
+  SalesforceConnector,
+  configFields,
+  index_default as default,
+  doc
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../connector-shared/src/errors.ts","../../../connector-shared/src/retry.ts","../../../connector-shared/src/version.ts","../../../connector-shared/src/request.ts","../../../connector-shared/src/rate-limit.ts","../../../connector-shared/src/sanitize.ts","../../../connector-shared/src/epoch.ts","../../../connector-shared/src/pagination.ts","../../../connector-shared/src/logger.ts","../src/salesforce.ts","../src/index.ts"],"sourcesContent":["import type { HttpResponse } from './types';\n\nexport type HttpErrorKind =\n  | 'transient'\n  | 'rate_limit'\n  | 'auth'\n  | 'upstream_bug'\n  | 'client_bug';\n\nexport abstract class HttpClientError extends Error {\n  abstract readonly kind: HttpErrorKind;\n  readonly response?: HttpResponse;\n\n  constructor(message: string, response?: HttpResponse) {\n    super(message);\n    this.name = new.target.name;\n    this.response = response;\n  }\n}\n\nexport class TransientError extends HttpClientError {\n  readonly kind = 'transient' as const;\n}\n\nexport class RateLimitError extends HttpClientError {\n  readonly kind = 'rate_limit' as const;\n  readonly retryAfter?: Date;\n\n  constructor(message: string, response?: HttpResponse, retryAfter?: Date) {\n    super(message, response);\n    this.retryAfter = retryAfter;\n  }\n}\n\nexport class AuthError extends HttpClientError {\n  readonly kind = 'auth' as const;\n}\n\nexport class UpstreamBugError extends HttpClientError {\n  readonly kind = 'upstream_bug' as const;\n}\n\nexport class ClientBugError extends HttpClientError {\n  readonly kind = 'client_bug' as const;\n}\n\nexport function classifyStatus(status: number): HttpErrorKind {\n  if (status === 429) {\n    return 'rate_limit';\n  }\n  if (status === 401 || status === 403) {\n    return 'auth';\n  }\n  if (status === 408) {\n    return 'transient';\n  }\n  if (status >= 500) {\n    return 'upstream_bug';\n  }\n  if (status >= 400) {\n    return 'client_bug';\n  }\n  return 'client_bug';\n}\n\nexport function errorForStatus(\n  message: string,\n  response: HttpResponse,\n  retryAfter?: Date,\n): HttpClientError {\n  const kind = classifyStatus(response.status);\n  switch (kind) {\n    case 'rate_limit':\n      return new RateLimitError(message, response, retryAfter);\n    case 'auth':\n      return new AuthError(message, response);\n    case 'transient':\n      return new TransientError(message, response);\n    case 'upstream_bug':\n      return new UpstreamBugError(message, response);\n    case 'client_bug':\n      return new ClientBugError(message, response);\n  }\n}\n","import { HttpClientError, RateLimitError, TransientError } from './errors';\n\nexport interface RetryPolicy {\n  maxAttempts?: number;\n  initialDelayMs?: number;\n  maxDelayMs?: number;\n  retryOn?: (status: number | null, err?: Error) => boolean;\n}\n\nexport const defaultRetryOn = (status: number | null, err?: Error): boolean => {\n  if (err instanceof RateLimitError) {\n    return true;\n  }\n  if (err instanceof TransientError) {\n    return true;\n  }\n  if (status === null) {\n    return err instanceof Error && !(err instanceof HttpClientError);\n  }\n  if (status === 408 || status === 429) {\n    return true;\n  }\n  if (status >= 500) {\n    return true;\n  }\n  return false;\n};\n\nexport function backoffDelayMs(\n  attempt: number,\n  policy: Required<Pick<RetryPolicy, 'initialDelayMs' | 'maxDelayMs'>>,\n): number {\n  const base = policy.initialDelayMs * 2 ** attempt;\n  const jitter = base * 0.25 * Math.random();\n  return Math.min(base + jitter, policy.maxDelayMs);\n}\n\nexport function parseRetryAfter(\n  headerValue: string | null,\n  now: Date = new Date(),\n): Date | undefined {\n  if (!headerValue) {\n    return undefined;\n  }\n  const trimmed = headerValue.trim();\n  if (/^\\d+$/.test(trimmed)) {\n    return new Date(now.getTime() + Number(trimmed) * 1000);\n  }\n  const parsed = Date.parse(trimmed);\n  if (Number.isNaN(parsed)) {\n    return undefined;\n  }\n  return new Date(parsed);\n}\n\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  if (signal?.aborted) {\n    return Promise.reject(signal.reason ?? new Error('Aborted'));\n  }\n  return new Promise<void>((resolve, reject) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(signal!.reason ?? new Error('Aborted'));\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener('abort', onAbort);\n      resolve();\n    }, ms);\n    signal?.addEventListener('abort', onAbort, { once: true });\n  });\n}\n","export const HTTP_CLIENT_VERSION = '0.0.0';\n\nexport const DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n\nexport function connectorUserAgent(connectorId: string): string {\n  return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n}\n","import {\n  AuthError,\n  ClientBugError,\n  HttpClientError,\n  RateLimitError,\n  TransientError,\n  UpstreamBugError,\n  errorForStatus,\n} from './errors';\nimport { defaultRetryOn, parseRetryAfter, sleep } from './retry';\nimport type { FetchLike, HttpMethod, HttpRequest, HttpResponse } from './types';\nimport { DEFAULT_USER_AGENT } from './version';\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_INITIAL_DELAY_MS = 1000;\nconst DEFAULT_MAX_DELAY_MS = 60_000;\nconst OBSERVER_TIMEOUT_MS = 250;\n\nexport interface RequestObservation {\n  url: string;\n  method: HttpMethod;\n  status: number;\n  resource: string;\n  requestId: string;\n  body: unknown;\n}\n\nexport type RequestObserver = (\n  event: RequestObservation,\n) => void | Promise<void>;\n\nexport interface RequestOptions {\n  fetch?: FetchLike;\n  observer?: RequestObserver;\n  resource: string;\n  requestId?: string;\n}\n\nasync function notifyObserver(\n  observer: RequestObserver,\n  event: RequestObservation,\n): Promise<void> {\n  let result: void | Promise<void>;\n  try {\n    result = observer(event);\n  } catch (err) {\n    console.warn('[connector-shared] request observer threw:', err);\n    return;\n  }\n  if (!(result instanceof Promise)) {\n    return;\n  }\n  const guarded = result.catch((err) => {\n    console.warn('[connector-shared] request observer rejected:', err);\n  });\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<void>((resolve) => {\n    timer = setTimeout(resolve, OBSERVER_TIMEOUT_MS);\n  });\n  try {\n    await Promise.race([guarded, timeout]);\n  } finally {\n    if (timer) {\n      clearTimeout(timer);\n    }\n  }\n}\n\nfunction newRequestId(): string {\n  const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (c?.randomUUID) {\n    return c.randomUUID();\n  }\n  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction mergeHeaders(\n  defaults: Record<string, string>,\n  overrides: Record<string, string> | undefined,\n): Record<string, string> {\n  const merged: Record<string, string> = {};\n  for (const [k, v] of Object.entries(defaults)) {\n    merged[k.toLowerCase()] = v;\n  }\n  if (overrides) {\n    for (const [k, v] of Object.entries(overrides)) {\n      merged[k.toLowerCase()] = v;\n    }\n  }\n  return merged;\n}\n\nfunction linkTimeoutSignal(\n  parent: AbortSignal | undefined,\n  timeoutMs: number,\n): { signal: AbortSignal; cancel: () => void } {\n  const controller = new AbortController();\n  const onParentAbort = () => {\n    controller.abort(parent?.reason);\n  };\n  if (parent) {\n    if (parent.aborted) {\n      controller.abort(parent.reason);\n    } else {\n      parent.addEventListener('abort', onParentAbort, { once: true });\n    }\n  }\n  const timer = setTimeout(() => {\n    controller.abort(new Error(`Request timed out after ${timeoutMs}ms`));\n  }, timeoutMs);\n  return {\n    signal: controller.signal,\n    cancel: () => {\n      clearTimeout(timer);\n      if (parent) {\n        parent.removeEventListener('abort', onParentAbort);\n      }\n    },\n  };\n}\n\nasync function readBody(res: Response, parseJson: boolean): Promise<unknown> {\n  if (res.status === 204 || res.status === 205) {\n    return null;\n  }\n  const contentType = res.headers.get('content-type') ?? '';\n  if (parseJson && contentType.includes('application/json')) {\n    const text = await res.text();\n    if (text.length === 0) {\n      return null;\n    }\n    return JSON.parse(text);\n  }\n  return res.text();\n}\n\nexport async function request<T = unknown>(\n  req: HttpRequest,\n  options: RequestOptions,\n): Promise<HttpResponse<T>> {\n  const fetchImpl: FetchLike = options.fetch ?? (globalThis.fetch as FetchLike);\n  const retry = req.retry ?? {};\n  const maxAttempts = retry.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n  const initialDelayMs = retry.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;\n  const maxDelayMs = retry.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;\n  const retryOn = retry.retryOn ?? defaultRetryOn;\n  const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const parseJson = req.parseJson ?? true;\n\n  const headers = mergeHeaders(\n    {\n      'User-Agent': DEFAULT_USER_AGENT,\n      Accept: 'application/json',\n    },\n    req.headers,\n  );\n\n  let lastErr: Error | undefined;\n\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    req.signal?.throwIfAborted();\n\n    const { signal, cancel } = linkTimeoutSignal(req.signal, timeoutMs);\n    let res: Response;\n    try {\n      res = await fetchImpl(req.url, {\n        method: req.method ?? 'GET',\n        headers,\n        body: req.body as RequestInit['body'],\n        signal,\n      });\n    } catch (err) {\n      cancel();\n      if (req.signal?.aborted) {\n        throw req.signal.reason ?? err;\n      }\n      const error = err instanceof Error ? err : new Error(String(err));\n      lastErr = error;\n      if (attempt < maxAttempts - 1 && retryOn(null, error)) {\n        const delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n        await sleep(delay, req.signal);\n        continue;\n      }\n      throw new TransientError(error.message);\n    }\n    cancel();\n\n    const body = await readBody(res, parseJson);\n    const httpResponse: HttpResponse<T> = {\n      status: res.status,\n      headers: res.headers,\n      body: body as T,\n    };\n    if (req.rateLimit) {\n      const state = req.rateLimit.parse(res.headers);\n      if (state) {\n        httpResponse.rateLimitState = state;\n      }\n    }\n\n    if (options.observer) {\n      await notifyObserver(options.observer, {\n        url: req.url,\n        method: req.method ?? 'GET',\n        status: res.status,\n        resource: options.resource,\n        requestId: options.requestId ?? newRequestId(),\n        body,\n      });\n    }\n\n    if (res.ok) {\n      return httpResponse;\n    }\n\n    const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n    const message = `HTTP ${res.status} ${res.statusText} for ${req.method ?? 'GET'} ${req.url}`;\n    const err = errorForStatus(message, httpResponse, retryAfter);\n\n    if (\n      attempt < maxAttempts - 1 &&\n      retryOn(res.status, err) &&\n      !(err instanceof AuthError) &&\n      !(err instanceof ClientBugError)\n    ) {\n      lastErr = err;\n      let delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n      if (err instanceof RateLimitError && retryAfter) {\n        const wait = retryAfter.getTime() - Date.now();\n        if (wait > 0) {\n          delay = Math.min(wait, maxDelayMs);\n        }\n      }\n      await sleep(delay, req.signal);\n      continue;\n    }\n\n    throw err;\n  }\n\n  throw lastErr ?? new UpstreamBugError('Exhausted retry attempts');\n}\n\nfunction computeDelay(\n  attempt: number,\n  initialDelayMs: number,\n  maxDelayMs: number,\n): number {\n  const base = initialDelayMs * 2 ** attempt;\n  const jitter = base * 0.25 * Math.random();\n  return Math.min(base + jitter, maxDelayMs);\n}\n\nexport { HttpClientError };\n","export interface RateLimitState {\n  remaining: number;\n  resetAt: Date;\n}\n\nexport interface RateLimitPolicy {\n  parse(headers: Headers): RateLimitState | null;\n}\n\nexport interface StandardRateLimitPolicyConfig {\n  remainingHeader: string;\n  resetHeader: string;\n  resetUnit: 's' | 'ms';\n  resetFallbackMs?: number;\n}\n\nexport function standardRateLimitPolicy(\n  config: StandardRateLimitPolicyConfig,\n): RateLimitPolicy {\n  const { remainingHeader, resetHeader, resetUnit, resetFallbackMs } = config;\n  const multiplier = resetUnit === 's' ? 1000 : 1;\n  return {\n    parse(h) {\n      const remainingRaw = h.get(remainingHeader);\n      if (remainingRaw === null || remainingRaw.trim() === '') {\n        return null;\n      }\n      const remaining = Number(remainingRaw);\n      if (!Number.isFinite(remaining)) {\n        return null;\n      }\n      const resetRaw = h.get(resetHeader);\n      if (resetRaw === null) {\n        if (resetFallbackMs === undefined) {\n          return null;\n        }\n        return {\n          remaining,\n          resetAt: new Date(Date.now() + resetFallbackMs),\n        };\n      }\n      if (resetRaw.trim() === '') {\n        return null;\n      }\n      const reset = Number(resetRaw);\n      if (!Number.isFinite(reset) || reset < 0) {\n        return null;\n      }\n      const resetMs = reset * multiplier;\n      if (!Number.isFinite(resetMs)) {\n        return null;\n      }\n      return { remaining, resetAt: new Date(resetMs) };\n    },\n  };\n}\n","export interface SanitizeAllowedUrlOptions {\n  url: string | null;\n  host: string;\n  pathname: string;\n  protocol?: 'https:' | 'http:';\n}\n\nexport function sanitizeAllowedUrl(\n  options: SanitizeAllowedUrlOptions,\n): string | null {\n  const { url, host, pathname, protocol = 'https:' } = options;\n  if (url === null) {\n    return null;\n  }\n  try {\n    const u = new URL(url);\n    if (u.protocol !== protocol || u.host !== host || u.pathname !== pathname) {\n      return null;\n    }\n    return u.toString();\n  } catch {\n    return null;\n  }\n}\n","export type EpochUnit = 'ms' | 's' | 'iso';\n\nexport function parseEpoch(\n  value: number | string | null | undefined,\n  unit: EpochUnit,\n): number | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  if (unit === 'iso') {\n    if (typeof value !== 'string') {\n      return null;\n    }\n    const ms = new Date(value).getTime();\n    return Number.isFinite(ms) ? ms : null;\n  }\n  if (typeof value === 'string' && value.trim() === '') {\n    return null;\n  }\n  const n = typeof value === 'number' ? value : Number(value);\n  if (!Number.isFinite(n)) {\n    return null;\n  }\n  const result = unit === 's' ? n * 1000 : n;\n  return Number.isFinite(result) ? result : null;\n}\n","import { request } from './request';\nimport type { HttpRequest } from './types';\n\nexport function parseLinkHeader(header: string | null): Record<string, string> {\n  if (!header) {\n    return {};\n  }\n  const result: Record<string, string> = {};\n  for (const part of header.split(',')) {\n    const match = part.match(/<([^>]+)>\\s*;\\s*rel=\"([^\"]+)\"/);\n    if (match) {\n      result[match[2]!] = match[1]!;\n    }\n  }\n  return result;\n}\n\nexport async function* paginateLink<T>(\n  initial: HttpRequest,\n  parse: (body: unknown) => T[],\n  options: { resource: string },\n): AsyncIterable<T> {\n  let next: string | null = initial.url;\n  while (next) {\n    const res: Awaited<ReturnType<typeof request>> = await request(\n      {\n        ...initial,\n        url: next,\n      },\n      { resource: options.resource },\n    );\n    for (const item of parse(res.body)) {\n      yield item;\n    }\n    const links = parseLinkHeader(res.headers.get('link'));\n    next = links['next'] ?? null;\n  }\n}\n\nexport async function* paginateCursor<T>(\n  initial: HttpRequest,\n  parse: (body: unknown) => { items: T[]; nextCursor: string | null },\n  buildNext: (req: HttpRequest, cursor: string) => HttpRequest,\n  options: { resource: string },\n): AsyncIterable<T> {\n  let req: HttpRequest = initial;\n  while (true) {\n    const res = await request(req, { resource: options.resource });\n    const { items, nextCursor } = parse(res.body);\n    for (const item of items) {\n      yield item;\n    }\n    if (!nextCursor) {\n      return;\n    }\n    req = buildNext(req, nextCursor);\n  }\n}\n\nexport async function* paginatePage<T>(\n  initial: HttpRequest,\n  parse: (body: unknown) => { items: T[]; hasMore: boolean },\n  buildPage: (req: HttpRequest, page: number) => HttpRequest,\n  options: { resource: string },\n): AsyncIterable<T> {\n  let page = 1;\n  while (true) {\n    const req = page === 1 ? initial : buildPage(initial, page);\n    const res = await request(req, { resource: options.resource });\n    const { items, hasMore } = parse(res.body);\n    for (const item of items) {\n      yield item;\n    }\n    if (!hasMore || items.length === 0) {\n      return;\n    }\n    page++;\n  }\n}\n","export type LogFields = Record<string, unknown>;\n\nexport interface ConnectorLogger {\n  info(event: string, fields?: LogFields): void;\n  warn(event: string, fields?: LogFields): void;\n}\n\nexport interface ConnectorLoggerOptions {\n  scope: string;\n}\n\nconst MAX_VALUE_LEN = 120;\n\nfunction truncate(s: string, max = MAX_VALUE_LEN): string {\n  if (s.length <= max) {\n    return s;\n  }\n  return `${s.slice(0, max - 1)}…`;\n}\n\nfunction formatValue(value: unknown): string {\n  if (value === null) {\n    return 'null';\n  }\n  if (value === undefined) {\n    return '';\n  }\n  if (typeof value === 'number' || typeof value === 'boolean') {\n    return String(value);\n  }\n  if (typeof value === 'string') {\n    const t = truncate(value);\n    if (/[\\s\"=]/.test(t)) {\n      return JSON.stringify(t);\n    }\n    return t;\n  }\n  if (typeof value === 'bigint') {\n    return value.toString();\n  }\n  let json: string | undefined;\n  try {\n    json = JSON.stringify(value);\n  } catch {\n    json = undefined;\n  }\n  return truncate(json ?? String(value));\n}\n\nexport function formatLogFields(fields?: LogFields): string {\n  if (!fields) {\n    return '';\n  }\n  const parts: string[] = [];\n  for (const [k, v] of Object.entries(fields)) {\n    if (v === undefined) {\n      continue;\n    }\n    parts.push(`${k}=${formatValue(v)}`);\n  }\n  return parts.length > 0 ? ` ${parts.join(' ')}` : '';\n}\n\nexport function formatLogLine(\n  scope: string,\n  event: string,\n  fields?: LogFields,\n): string {\n  return `[${scope}] ${event}${formatLogFields(fields)}`;\n}\n\nexport function createDefaultConnectorLogger(\n  opts: ConnectorLoggerOptions,\n): ConnectorLogger {\n  return {\n    info(event, fields) {\n      console.info(formatLogLine(opts.scope, event, fields));\n    },\n    warn(event, fields) {\n      console.warn(formatLogLine(opts.scope, event, fields));\n    },\n  };\n}\n\nconst NOOP_LOGGER: ConnectorLogger = {\n  info() {},\n  warn() {},\n};\n\nexport function noopConnectorLogger(): ConnectorLogger {\n  return NOOP_LOGGER;\n}\n","import {\n  type HttpResponse,\n  connectorUserAgent,\n} from '@rawdash/connector-shared';\nimport {\n  BaseConnector,\n  type ConnectorContext,\n  type ConnectorDoc,\n  type CredentialsSchema,\n  type StorageHandle,\n  type SyncOptions,\n  type SyncResult,\n  defineConfigFields,\n  defineConnectorDoc,\n  defineResources,\n  makeChunkedCursorGuard,\n  paginateChunked,\n  schemasFromResources,\n  selectActivePhases,\n} from '@rawdash/core';\nimport { z } from 'zod';\n\n// ---------------------------------------------------------------------------\n// configFields\n// ---------------------------------------------------------------------------\n\nexport const configFields = defineConfigFields(\n  z.object({\n    clientId: z.string().min(1).meta({\n      label: 'Connected app consumer key',\n      description:\n        'Consumer key (client ID) of the Salesforce Connected App used for OAuth 2.0 refresh-token exchange.',\n      placeholder: '3MVG9...',\n    }),\n    clientSecret: z.object({ $secret: z.string().min(1) }).meta({\n      label: 'Connected app consumer secret',\n      description: 'Consumer secret of the Salesforce Connected App.',\n      placeholder: 'SF_CLIENT_SECRET',\n      secret: true,\n    }),\n    refreshToken: z.object({ $secret: z.string().min(1) }).meta({\n      label: 'OAuth refresh token',\n      description:\n        'OAuth 2.0 refresh token obtained from the Connected App authorization code flow. Stored as a secret.',\n      placeholder: 'SF_REFRESH_TOKEN',\n      secret: true,\n    }),\n    instanceUrl: z.string().url().meta({\n      label: 'Instance URL',\n      description:\n        'Salesforce instance URL, e.g. https://mycompany.my.salesforce.com. Returned alongside the refresh token from the OAuth flow; never use the generic login.salesforce.com URL here.',\n      placeholder: 'https://mycompany.my.salesforce.com',\n    }),\n    apiVersion: z\n      .string()\n      .regex(/^\\d+\\.\\d+$/)\n      .optional()\n      .meta({\n        label: 'REST API version',\n        description:\n          'Salesforce REST API version, e.g. \"59.0\". Defaults to 59.0; bump to pick up newer SOQL semantics.',\n        placeholder: '59.0',\n      }),\n    resources: z\n      .array(\n        z.enum([\n          'users',\n          'accounts',\n          'leads',\n          'opportunities',\n          'opportunity_events',\n        ]),\n      )\n      .nonempty()\n      .optional()\n      .meta({\n        label: 'Resources',\n        description:\n          'Which Salesforce resources to sync. Omit to sync all resources. The Connected App only needs read access for the resources listed here.',\n      }),\n  }),\n);\n\nexport const doc: ConnectorDoc = defineConnectorDoc({\n  displayName: 'Salesforce',\n  category: 'sales',\n  brandColor: '#00A1E0',\n  tagline:\n    'Sync opportunities, opportunity stage-change events, accounts, leads, and users from a Salesforce org for pipeline, forecast, and quota-attainment dashboards.',\n  vendor: {\n    name: 'Salesforce',\n    apiDocs:\n      'https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/',\n    website: 'https://www.salesforce.com',\n  },\n  auth: {\n    summary:\n      'OAuth 2.0 with a refresh token issued by a Salesforce Connected App. Requires the consumer key/secret, a refresh token, and the org instance URL.',\n    setup: [\n      'In Salesforce, go to Setup → App Manager → New Connected App and check \"Enable OAuth Settings\".',\n      'Set the callback URL to a URL you control (e.g. https://localhost:8080/callback); it only has to be reachable when minting the initial refresh token.',\n      'Under Selected OAuth Scopes add \"Access and manage your data (api)\" and \"Perform requests on your behalf at any time (refresh_token, offline_access)\".',\n      'Save, then copy the Consumer Key (client ID) and Consumer Secret from the connected app detail page.',\n      'Authorize via https://login.salesforce.com/services/oauth2/authorize?response_type=code&client_id=<KEY>&redirect_uri=<URL> and exchange the resulting code at /services/oauth2/token to obtain a refresh token and the org instance_url.',\n      'Use the org instance URL from the token response (e.g. https://mycompany.my.salesforce.com), not login.salesforce.com.',\n      'Store the consumer secret and refresh token as rawdash secrets and reference them as secret(\"SF_CLIENT_SECRET\") and secret(\"SF_REFRESH_TOKEN\").',\n    ],\n  },\n  rateLimit:\n    'Salesforce caps total API calls per org per 24 hours. Responses include a Sforce-Limit-Info header (api-usage=NN/MM); size sync intervals so the daily budget is not exhausted. The shared HTTP client retries on 429 with Retry-After.',\n  limitations: [\n    'Custom objects are out of scope for v1; only the standard objects listed above are synced.',\n    'Salesforce Marketing Cloud is tracked under a separate connector.',\n  ],\n});\n\nexport interface SalesforceSettings {\n  instanceUrl: string;\n  apiVersion?: string;\n  resources?: readonly SalesforceResource[];\n}\n\n// ---------------------------------------------------------------------------\n// Credentials\n// ---------------------------------------------------------------------------\n\nconst salesforceCredentials = {\n  clientId: {\n    description: 'Salesforce Connected App consumer key (client ID)',\n    auth: 'required' as const,\n  },\n  clientSecret: {\n    description: 'Salesforce Connected App consumer secret',\n    auth: 'required' as const,\n  },\n  refreshToken: {\n    description: 'Salesforce OAuth 2.0 refresh token',\n    auth: 'required' as const,\n  },\n} satisfies CredentialsSchema;\n\ntype SalesforceCredentials = typeof salesforceCredentials;\n\n// ---------------------------------------------------------------------------\n// Phases + cursor\n// ---------------------------------------------------------------------------\n\nconst PHASE_ORDER = [\n  'users',\n  'accounts',\n  'leads',\n  'opportunities',\n  'opportunity_events',\n] as const;\n\ntype SalesforcePhase = (typeof PHASE_ORDER)[number];\n\nexport type SalesforceResource = SalesforcePhase;\n\nconst isSalesforceSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);\n\nconst ENTITY_TYPE_BY_PHASE: Partial<Record<SalesforcePhase, string>> = {\n  users: 'salesforce_user',\n  accounts: 'salesforce_account',\n  leads: 'salesforce_lead',\n  opportunities: 'salesforce_opportunity',\n};\n\nconst STAGE_CHANGE_EVENT = 'salesforce_opportunity_stage_change';\n\nconst DEFAULT_API_VERSION = '59.0';\n\n// ---------------------------------------------------------------------------\n// API response types\n// ---------------------------------------------------------------------------\n\ninterface QueryResponse<T> {\n  totalSize: number;\n  done: boolean;\n  nextRecordsUrl?: string;\n  records: T[];\n}\n\ninterface OauthTokenResponse {\n  access_token: string;\n  instance_url?: string;\n}\n\ninterface SalesforceUser {\n  Id: string;\n  Name: string | null;\n  Email: string | null;\n  IsActive: boolean;\n}\n\ninterface SalesforceAccount {\n  Id: string;\n  Name: string | null;\n  Industry: string | null;\n  AnnualRevenue: number | null;\n  OwnerId: string | null;\n  CreatedDate: string;\n  LastModifiedDate: string;\n}\n\ninterface SalesforceLead {\n  Id: string;\n  Email: string | null;\n  Status: string | null;\n  LeadSource: string | null;\n  ConvertedDate: string | null;\n  CreatedDate: string;\n  LastModifiedDate: string;\n}\n\ninterface SalesforceOpportunity {\n  Id: string;\n  Name: string | null;\n  StageName: string | null;\n  Amount: number | null;\n  CloseDate: string | null;\n  OwnerId: string | null;\n  Probability: number | null;\n  ForecastCategoryName: string | null;\n  IsClosed: boolean;\n  IsWon: boolean;\n  CreatedDate: string;\n  LastModifiedDate: string;\n}\n\ninterface SalesforceFieldHistory {\n  Id: string;\n  OpportunityId: string;\n  Field: string;\n  OldValue: string | null;\n  NewValue: string | null;\n  CreatedDate: string;\n  CreatedById: string | null;\n}\n\n// ---------------------------------------------------------------------------\n// Zod schemas\n// ---------------------------------------------------------------------------\n\nconst idString = z.string().min(1);\nconst isoDate = z.string().min(1);\n\nconst oauthTokenSchema = z.object({\n  access_token: z.string().min(1),\n  instance_url: z.string().optional(),\n});\n\nconst userSchema = z.object({\n  Id: idString,\n  Name: z.string().nullable(),\n  Email: z.string().nullable(),\n  IsActive: z.boolean(),\n});\n\nconst accountSchema = z.object({\n  Id: idString,\n  Name: z.string().nullable(),\n  Industry: z.string().nullable(),\n  AnnualRevenue: z.number().nullable(),\n  OwnerId: z.string().nullable(),\n  CreatedDate: isoDate,\n  LastModifiedDate: isoDate,\n});\n\nconst leadSchema = z.object({\n  Id: idString,\n  Email: z.string().nullable(),\n  Status: z.string().nullable(),\n  LeadSource: z.string().nullable(),\n  ConvertedDate: z.string().nullable(),\n  CreatedDate: isoDate,\n  LastModifiedDate: isoDate,\n});\n\nconst opportunitySchema = z.object({\n  Id: idString,\n  Name: z.string().nullable(),\n  StageName: z.string().nullable(),\n  Amount: z.number().nullable(),\n  CloseDate: z.string().nullable(),\n  OwnerId: z.string().nullable(),\n  Probability: z.number().nullable(),\n  ForecastCategoryName: z.string().nullable(),\n  IsClosed: z.boolean(),\n  IsWon: z.boolean(),\n  CreatedDate: isoDate,\n  LastModifiedDate: isoDate,\n});\n\nconst fieldHistorySchema = z.object({\n  Id: idString,\n  OpportunityId: idString,\n  Field: z.string(),\n  OldValue: z.string().nullable(),\n  NewValue: z.string().nullable(),\n  CreatedDate: isoDate,\n  CreatedById: z.string().nullable(),\n});\n\n// ---------------------------------------------------------------------------\n// Resources\n// ---------------------------------------------------------------------------\n\nconst salesforceResources = defineResources({\n  salesforce_user: {\n    shape: 'entity',\n    description:\n      'Salesforce users, keyed by user id, with name, email, and active state. Used to attribute opportunities, accounts, and stage changes to owners.',\n    endpoint: 'GET /services/data/v{version}/query (SOQL: FROM User)',\n    notes: 'Users are backfilled in full on every run; the table is small.',\n    fields: [\n      { name: 'name', description: 'Full name of the user.' },\n      { name: 'email', description: 'User email address.' },\n      { name: 'isActive', description: 'Whether the user is active.' },\n    ],\n    responses: {\n      oauth_token: oauthTokenSchema,\n      users: z.array(userSchema),\n    },\n  },\n  salesforce_account: {\n    shape: 'entity',\n    description:\n      'Accounts (companies), keyed by account id, with industry, annual revenue, owner, and creation time.',\n    endpoint: 'GET /services/data/v{version}/query (SOQL: FROM Account)',\n    notes: 'Upserts by id; incremental syncs filter on LastModifiedDate.',\n    fields: [\n      { name: 'name', description: 'Account name.' },\n      { name: 'industry', description: 'Industry classification.' },\n      {\n        name: 'annualRevenue',\n        description: 'Annual revenue in the org currency.',\n      },\n      { name: 'ownerId', description: 'User id of the account owner.' },\n      {\n        name: 'createdAt',\n        description: 'Account creation time (Unix ms).',\n      },\n    ],\n    responses: { accounts: z.array(accountSchema) },\n  },\n  salesforce_lead: {\n    shape: 'entity',\n    description:\n      'Leads, keyed by lead id, with email, status, source, and conversion time.',\n    endpoint: 'GET /services/data/v{version}/query (SOQL: FROM Lead)',\n    notes: 'Upserts by id; incremental syncs filter on LastModifiedDate.',\n    fields: [\n      { name: 'email', description: 'Lead email address.' },\n      { name: 'status', description: 'Lead status.' },\n      { name: 'source', description: 'Lead source (LeadSource).' },\n      {\n        name: 'convertedAt',\n        description: 'When the lead was converted (Unix ms), if any.',\n      },\n      { name: 'createdAt', description: 'Lead creation time (Unix ms).' },\n    ],\n    responses: { leads: z.array(leadSchema) },\n  },\n  salesforce_opportunity: {\n    shape: 'entity',\n    description:\n      'Opportunities, keyed by opportunity id, with stage, amount, close date, owner, probability, forecast category, and closed/won flags.',\n    endpoint: 'GET /services/data/v{version}/query (SOQL: FROM Opportunity)',\n    notes: 'Upserts by id; incremental syncs filter on LastModifiedDate.',\n    fields: [\n      { name: 'name', description: 'Opportunity name.' },\n      { name: 'stage', description: 'Current StageName.' },\n      { name: 'amount', description: 'Opportunity amount in org currency.' },\n      { name: 'closeDate', description: 'Expected close date (Unix ms).' },\n      { name: 'ownerId', description: 'User id of the opportunity owner.' },\n      { name: 'probability', description: 'Win probability percentage.' },\n      {\n        name: 'forecastCategory',\n        description: 'Forecast category name.',\n      },\n      { name: 'isClosed', description: 'Whether the opportunity is closed.' },\n      { name: 'isWon', description: 'Whether the opportunity is won.' },\n      {\n        name: 'createdAt',\n        description: 'Opportunity creation time (Unix ms).',\n      },\n    ],\n    responses: { opportunities: z.array(opportunitySchema) },\n  },\n  salesforce_opportunity_stage_change: {\n    shape: 'event',\n    description:\n      'Opportunity stage transitions derived from OpportunityFieldHistory rows where Field = StageName. One event per transition, timestamped at the change CreatedDate.',\n    endpoint:\n      \"GET /services/data/v{version}/query (SOQL: FROM OpportunityFieldHistory WHERE Field = 'StageName')\",\n    notes:\n      'Stage-change events are immutable; their scope is only cleared on a full sync so an incremental window does not drop history outside its range.',\n    fields: [\n      {\n        name: 'historyId',\n        description: 'OpportunityFieldHistory row id.',\n      },\n      {\n        name: 'opportunityId',\n        description: 'Id of the opportunity that changed stage.',\n      },\n      { name: 'fromStage', description: 'Previous StageName (OldValue).' },\n      { name: 'toStage', description: 'New StageName (NewValue).' },\n      {\n        name: 'actorId',\n        description: 'User id who made the change (CreatedById).',\n      },\n    ],\n    responses: { opportunity_events: z.array(fieldHistorySchema) },\n  },\n});\n\n// ---------------------------------------------------------------------------\n// SOQL helpers\n// ---------------------------------------------------------------------------\n\nconst PHASE_SOQL: Record<SalesforcePhase, string> = {\n  users: 'SELECT Id, Name, Email, IsActive FROM User',\n  accounts:\n    'SELECT Id, Name, Industry, AnnualRevenue, OwnerId, CreatedDate, LastModifiedDate FROM Account',\n  leads:\n    'SELECT Id, Email, Status, LeadSource, ConvertedDate, CreatedDate, LastModifiedDate FROM Lead',\n  opportunities:\n    'SELECT Id, Name, StageName, Amount, CloseDate, OwnerId, Probability, ForecastCategoryName, IsClosed, IsWon, CreatedDate, LastModifiedDate FROM Opportunity',\n  opportunity_events:\n    \"SELECT Id, OpportunityId, Field, OldValue, NewValue, CreatedDate, CreatedById FROM OpportunityFieldHistory WHERE Field = 'StageName'\",\n};\n\nconst PHASE_TIMESTAMP: Record<SalesforcePhase, string> = {\n  users: '',\n  accounts: 'LastModifiedDate',\n  leads: 'LastModifiedDate',\n  opportunities: 'LastModifiedDate',\n  opportunity_events: 'CreatedDate',\n};\n\n// Salesforce SOQL accepts ISO 8601 date-time literals without quotes\n// (e.g. 2024-01-01T00:00:00Z). Numeric milliseconds get stripped because the\n// reference grammar specifies whole-second precision for date-time literals.\nfunction soqlDateLiteral(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) {\n    return iso;\n  }\n  return `${d.toISOString().replace(/\\.\\d{3}Z$/, 'Z')}`;\n}\n\nfunction buildPhaseSoql(\n  phase: SalesforcePhase,\n  since: string | undefined,\n): string {\n  const base = PHASE_SOQL[phase];\n  const timestampField = PHASE_TIMESTAMP[phase];\n  if (!timestampField || !since) {\n    // Users have no LastModifiedDate filter on a per-row basis here; full\n    // SOQL is cheap and the table is small enough that a backfill on every\n    // tick is fine.\n    return timestampField\n      ? `${base} ORDER BY ${timestampField} ASC`\n      : `${base} ORDER BY Id ASC`;\n  }\n  const literal = soqlDateLiteral(since);\n  const connector = base.includes('WHERE') ? 'AND' : 'WHERE';\n  return `${base} ${connector} ${timestampField} >= ${literal} ORDER BY ${timestampField} ASC`;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction parseDateMs(value: string | null | undefined): number | null {\n  if (value === null || value === undefined || value === '') {\n    return null;\n  }\n  const ms = Date.parse(value);\n  return Number.isFinite(ms) ? ms : null;\n}\n\n// ---------------------------------------------------------------------------\n// SalesforceConnector\n// ---------------------------------------------------------------------------\n\nexport class SalesforceConnector extends BaseConnector<\n  SalesforceSettings,\n  SalesforceCredentials\n> {\n  static readonly id = 'salesforce';\n\n  static readonly resources = salesforceResources;\n\n  static readonly schemas = schemasFromResources(salesforceResources);\n\n  static create(input: unknown, ctx?: ConnectorContext): SalesforceConnector {\n    const parsed = configFields.parse(input);\n    return new SalesforceConnector(\n      {\n        instanceUrl: parsed.instanceUrl,\n        apiVersion: parsed.apiVersion,\n        resources: parsed.resources,\n      },\n      {\n        clientId: parsed.clientId,\n        clientSecret: parsed.clientSecret,\n        refreshToken: parsed.refreshToken,\n      },\n      ctx,\n    );\n  }\n\n  readonly id = 'salesforce';\n  override readonly credentials = salesforceCredentials;\n\n  private accessToken: string | null = null;\n\n  private apiVersion(): string {\n    return this.settings.apiVersion ?? DEFAULT_API_VERSION;\n  }\n\n  private baseUrl(): string {\n    return this.settings.instanceUrl.replace(/\\/+$/, '');\n  }\n\n  private async refreshAccessToken(signal?: AbortSignal): Promise<string> {\n    const body = new URLSearchParams({\n      grant_type: 'refresh_token',\n      client_id: this.creds.clientId,\n      client_secret: this.creds.clientSecret,\n      refresh_token: this.creds.refreshToken,\n    }).toString();\n    const res = await this.post<OauthTokenResponse>(\n      `${this.baseUrl()}/services/oauth2/token`,\n      {\n        resource: 'oauth_token',\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n          'User-Agent': connectorUserAgent('salesforce'),\n        },\n        body,\n        signal,\n      },\n    );\n    return res.body.access_token;\n  }\n\n  private async getAccessToken(signal?: AbortSignal): Promise<string> {\n    if (!this.accessToken) {\n      this.accessToken = await this.refreshAccessToken(signal);\n    }\n    return this.accessToken;\n  }\n\n  private async apiGet<T>(\n    pathOrUrl: string,\n    resource: string,\n    signal?: AbortSignal,\n  ): Promise<HttpResponse<T>> {\n    const url = pathOrUrl.startsWith('http')\n      ? pathOrUrl\n      : `${this.baseUrl()}${pathOrUrl}`;\n    const token = await this.getAccessToken(signal);\n    return this.get<T>(url, {\n      resource,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        Accept: 'application/json',\n        'User-Agent': connectorUserAgent('salesforce'),\n      },\n      signal,\n    });\n  }\n\n  // Salesforce returns nextRecordsUrl as a path like\n  // \"/services/data/v59.0/query/01g...-2000\". We pass the path back through\n  // the cursor verbatim; defensively strip the origin if the server ever\n  // returns an absolute URL so the cursor cannot exfiltrate credentials to\n  // an attacker-controlled host.\n  private sanitizeNextRecordsUrl(value: string | undefined): string | null {\n    if (!value) {\n      return null;\n    }\n    if (value.startsWith('/services/data/')) {\n      return value;\n    }\n    try {\n      const parsed = new URL(value);\n      if (parsed.pathname.startsWith('/services/data/')) {\n        return parsed.pathname + parsed.search;\n      }\n    } catch {\n      // ignore — fall through\n    }\n    return null;\n  }\n\n  private async fetchPage(\n    phase: SalesforcePhase,\n    page: string | null,\n    options: SyncOptions,\n    signal: AbortSignal | undefined,\n  ): Promise<{ items: unknown[]; next: string | null }> {\n    let path: string;\n    if (page) {\n      // Resumed cursor pages may have been tampered with; re-run them through\n      // the same allowlist used for fresh nextRecordsUrl values so a forged\n      // absolute URL can never carry the bearer token to an unintended host.\n      const safePage = this.sanitizeNextRecordsUrl(page);\n      if (!safePage) {\n        throw new Error(`Invalid Salesforce cursor page: ${page}`);\n      }\n      path = safePage;\n    } else {\n      const soql = buildPhaseSoql(phase, options.since);\n      const url = new URL(\n        `${this.baseUrl()}/services/data/v${this.apiVersion()}/query`,\n      );\n      url.searchParams.set('q', soql);\n      path = `${url.pathname}?${url.searchParams.toString()}`;\n    }\n    const res = await this.apiGet<QueryResponse<unknown>>(path, phase, signal);\n    return {\n      items: res.body.records,\n      next: res.body.done\n        ? null\n        : this.sanitizeNextRecordsUrl(res.body.nextRecordsUrl),\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Writers\n  // ---------------------------------------------------------------------------\n\n  private async writeUsers(\n    storage: StorageHandle,\n    items: SalesforceUser[],\n  ): Promise<void> {\n    for (const u of items) {\n      await storage.entity({\n        type: 'salesforce_user',\n        id: u.Id,\n        attributes: {\n          name: u.Name,\n          email: u.Email,\n          isActive: u.IsActive,\n        },\n        updated_at: 0,\n      });\n    }\n  }\n\n  private async writeAccounts(\n    storage: StorageHandle,\n    items: SalesforceAccount[],\n  ): Promise<void> {\n    for (const a of items) {\n      await storage.entity({\n        type: 'salesforce_account',\n        id: a.Id,\n        attributes: {\n          name: a.Name,\n          industry: a.Industry,\n          annualRevenue: a.AnnualRevenue,\n          ownerId: a.OwnerId,\n          createdAt: parseDateMs(a.CreatedDate),\n        },\n        updated_at: parseDateMs(a.LastModifiedDate) ?? 0,\n      });\n    }\n  }\n\n  private async writeLeads(\n    storage: StorageHandle,\n    items: SalesforceLead[],\n  ): Promise<void> {\n    for (const l of items) {\n      await storage.entity({\n        type: 'salesforce_lead',\n        id: l.Id,\n        attributes: {\n          email: l.Email,\n          status: l.Status,\n          source: l.LeadSource,\n          convertedAt: parseDateMs(l.ConvertedDate),\n          createdAt: parseDateMs(l.CreatedDate),\n        },\n        updated_at: parseDateMs(l.LastModifiedDate) ?? 0,\n      });\n    }\n  }\n\n  private async writeOpportunities(\n    storage: StorageHandle,\n    items: SalesforceOpportunity[],\n  ): Promise<void> {\n    for (const o of items) {\n      await storage.entity({\n        type: 'salesforce_opportunity',\n        id: o.Id,\n        attributes: {\n          name: o.Name,\n          stage: o.StageName,\n          amount: o.Amount,\n          closeDate: parseDateMs(o.CloseDate),\n          ownerId: o.OwnerId,\n          probability: o.Probability,\n          forecastCategory: o.ForecastCategoryName,\n          isClosed: o.IsClosed,\n          isWon: o.IsWon,\n          createdAt: parseDateMs(o.CreatedDate),\n        },\n        updated_at: parseDateMs(o.LastModifiedDate) ?? 0,\n      });\n    }\n  }\n\n  private async writeOpportunityEvents(\n    storage: StorageHandle,\n    items: SalesforceFieldHistory[],\n  ): Promise<void> {\n    for (const h of items) {\n      const ts = parseDateMs(h.CreatedDate);\n      if (ts === null) {\n        continue;\n      }\n      await storage.event({\n        name: STAGE_CHANGE_EVENT,\n        start_ts: ts,\n        end_ts: null,\n        attributes: {\n          historyId: h.Id,\n          opportunityId: h.OpportunityId,\n          fromStage: h.OldValue,\n          toStage: h.NewValue,\n          actorId: h.CreatedById,\n        },\n      });\n    }\n  }\n\n  private async writePhase(\n    storage: StorageHandle,\n    phase: SalesforcePhase,\n    items: unknown[],\n  ): Promise<void> {\n    switch (phase) {\n      case 'users':\n        return this.writeUsers(storage, items as SalesforceUser[]);\n      case 'accounts':\n        return this.writeAccounts(storage, items as SalesforceAccount[]);\n      case 'leads':\n        return this.writeLeads(storage, items as SalesforceLead[]);\n      case 'opportunities':\n        return this.writeOpportunities(\n          storage,\n          items as SalesforceOpportunity[],\n        );\n      case 'opportunity_events':\n        return this.writeOpportunityEvents(\n          storage,\n          items as SalesforceFieldHistory[],\n        );\n    }\n  }\n\n  private async clearScopeOnFirstPage(\n    storage: StorageHandle,\n    phase: SalesforcePhase,\n    isFull: boolean,\n  ): Promise<void> {\n    if (phase === 'opportunity_events') {\n      // Stage-change events are immutable; only clear on a full sync so an\n      // incremental window doesn't drop history outside its range.\n      if (isFull) {\n        await storage.events([], { names: [STAGE_CHANGE_EVENT] });\n      }\n      return;\n    }\n    if (!isFull) {\n      return;\n    }\n    const entityType = ENTITY_TYPE_BY_PHASE[phase];\n    if (entityType) {\n      await storage.entities([], { types: [entityType] });\n    }\n  }\n\n  async sync(\n    options: SyncOptions,\n    storage: StorageHandle,\n    signal?: AbortSignal,\n  ): Promise<SyncResult> {\n    const cursor = isSalesforceSyncCursor(options.cursor)\n      ? options.cursor\n      : undefined;\n    const isFull = options.mode === 'full';\n\n    const phases = selectActivePhases<SalesforceResource, SalesforcePhase>(\n      (r) => r,\n      PHASE_ORDER,\n      this.settings.resources,\n    );\n\n    return paginateChunked<SalesforcePhase, string>({\n      phases,\n      cursor,\n      signal,\n      logger: this.logger,\n      fetchPage: (phase, page, sig) =>\n        this.fetchPage(phase, page, options, sig),\n      writeBatch: async (phase, items, page) => {\n        if (page === null) {\n          await this.clearScopeOnFirstPage(storage, phase, isFull);\n        }\n        await this.writePhase(storage, phase, items);\n      },\n    });\n  }\n}\n","import { SalesforceConnector } from './salesforce';\n\nexport { configFields, doc, SalesforceConnector } from './salesforce';\nexport type { SalesforceSettings, SalesforceResource } from './salesforce';\nexport default SalesforceConnector;\n"],"mappings":";AEAO,IAAM,sBAAsB;AAE5B,IAAM,qBAAqB,qBAAqB,mBAAmB;AAEnE,SAAS,mBAAmB,aAA6B;AAC9D,SAAO,qBAAqB,WAAW,IAAI,mBAAmB;AAChE;;;AOFA;AAAA,EACE;AAAA,EAOA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAMX,IAAM,eAAe;AAAA,EAC1B,EAAE,OAAO;AAAA,IACP,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK;AAAA,MAC/B,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,IACD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MAC1D,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MAC1D,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK;AAAA,MACjC,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,IACD,YAAY,EACT,OAAO,EACP,MAAM,YAAY,EAClB,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,IACH,WAAW,EACR;AAAA,MACC,EAAE,KAAK;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,EACC,SAAS,EACT,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,IACJ,CAAC;AAAA,EACL,CAAC;AACH;AAEO,IAAM,MAAoB,mBAAmB;AAAA,EAClD,aAAa;AAAA,EACb,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,SACE;AAAA,EACF,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,SACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAAA,IACJ,SACE;AAAA,IACF,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,WACE;AAAA,EACF,aAAa;AAAA,IACX;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAYD,IAAM,wBAAwB;AAAA,EAC5B,UAAU;AAAA,IACR,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AAAA,EACA,cAAc;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AAAA,EACA,cAAc;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AACF;AAQA,IAAM,cAAc;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMA,IAAM,yBAAyB,uBAAuB,WAAW;AAEjE,IAAM,uBAAiE;AAAA,EACrE,OAAO;AAAA,EACP,UAAU;AAAA,EACV,OAAO;AAAA,EACP,eAAe;AACjB;AAEA,IAAM,qBAAqB;AAE3B,IAAM,sBAAsB;AA0E5B,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AACjC,IAAM,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAEhC,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,QAAQ;AACtB,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa;AAAA,EACb,kBAAkB;AACpB,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI;AAAA,EACJ,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa;AAAA,EACb,kBAAkB;AACpB,CAAC;AAED,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,QAAQ;AAAA,EACpB,OAAO,EAAE,QAAQ;AAAA,EACjB,aAAa;AAAA,EACb,kBAAkB;AACpB,CAAC;AAED,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI;AAAA,EACJ,eAAe;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa;AAAA,EACb,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAMD,IAAM,sBAAsB,gBAAgB;AAAA,EAC1C,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,aACE;AAAA,IACF,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,yBAAyB;AAAA,MACtD,EAAE,MAAM,SAAS,aAAa,sBAAsB;AAAA,MACpD,EAAE,MAAM,YAAY,aAAa,8BAA8B;AAAA,IACjE;AAAA,IACA,WAAW;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,MAAM,UAAU;AAAA,IAC3B;AAAA,EACF;AAAA,EACA,oBAAoB;AAAA,IAClB,OAAO;AAAA,IACP,aACE;AAAA,IACF,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,gBAAgB;AAAA,MAC7C,EAAE,MAAM,YAAY,aAAa,2BAA2B;AAAA,MAC5D;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,EAAE,MAAM,WAAW,aAAa,gCAAgC;AAAA,MAChE;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,EAAE;AAAA,EAChD;AAAA,EACA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,aACE;AAAA,IACF,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,EAAE,MAAM,SAAS,aAAa,sBAAsB;AAAA,MACpD,EAAE,MAAM,UAAU,aAAa,eAAe;AAAA,MAC9C,EAAE,MAAM,UAAU,aAAa,4BAA4B;AAAA,MAC3D;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,EAAE,MAAM,aAAa,aAAa,gCAAgC;AAAA,IACpE;AAAA,IACA,WAAW,EAAE,OAAO,EAAE,MAAM,UAAU,EAAE;AAAA,EAC1C;AAAA,EACA,wBAAwB;AAAA,IACtB,OAAO;AAAA,IACP,aACE;AAAA,IACF,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,oBAAoB;AAAA,MACjD,EAAE,MAAM,SAAS,aAAa,qBAAqB;AAAA,MACnD,EAAE,MAAM,UAAU,aAAa,sCAAsC;AAAA,MACrE,EAAE,MAAM,aAAa,aAAa,iCAAiC;AAAA,MACnE,EAAE,MAAM,WAAW,aAAa,oCAAoC;AAAA,MACpE,EAAE,MAAM,eAAe,aAAa,8BAA8B;AAAA,MAClE;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,EAAE,MAAM,YAAY,aAAa,qCAAqC;AAAA,MACtE,EAAE,MAAM,SAAS,aAAa,kCAAkC;AAAA,MAChE;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,EAAE;AAAA,EACzD;AAAA,EACA,qCAAqC;AAAA,IACnC,OAAO;AAAA,IACP,aACE;AAAA,IACF,UACE;AAAA,IACF,OACE;AAAA,IACF,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,EAAE,MAAM,aAAa,aAAa,iCAAiC;AAAA,MACnE,EAAE,MAAM,WAAW,aAAa,4BAA4B;AAAA,MAC5D;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,EAAE;AAAA,EAC/D;AACF,CAAC;AAMD,IAAM,aAA8C;AAAA,EAClD,OAAO;AAAA,EACP,UACE;AAAA,EACF,OACE;AAAA,EACF,eACE;AAAA,EACF,oBACE;AACJ;AAEA,IAAM,kBAAmD;AAAA,EACvD,OAAO;AAAA,EACP,UAAU;AAAA,EACV,OAAO;AAAA,EACP,eAAe;AAAA,EACf,oBAAoB;AACtB;AAKA,SAAS,gBAAgB,KAAqB;AAC5C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,SAAO,GAAG,EAAE,YAAY,EAAE,QAAQ,aAAa,GAAG,CAAC;AACrD;AAEA,SAAS,eACP,OACA,OACQ;AACR,QAAM,OAAO,WAAW,KAAK;AAC7B,QAAM,iBAAiB,gBAAgB,KAAK;AAC5C,MAAI,CAAC,kBAAkB,CAAC,OAAO;AAI7B,WAAO,iBACH,GAAG,IAAI,aAAa,cAAc,SAClC,GAAG,IAAI;AAAA,EACb;AACA,QAAM,UAAU,gBAAgB,KAAK;AACrC,QAAM,YAAY,KAAK,SAAS,OAAO,IAAI,QAAQ;AACnD,SAAO,GAAG,IAAI,IAAI,SAAS,IAAI,cAAc,OAAO,OAAO,aAAa,cAAc;AACxF;AAMA,SAAS,YAAY,OAAiD;AACpE,MAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AACA,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,SAAO,OAAO,SAAS,EAAE,IAAI,KAAK;AACpC;AAMO,IAAM,sBAAN,MAAM,6BAA4B,cAGvC;AAAA,EACA,OAAgB,KAAK;AAAA,EAErB,OAAgB,YAAY;AAAA,EAE5B,OAAgB,UAAU,qBAAqB,mBAAmB;AAAA,EAElE,OAAO,OAAO,OAAgB,KAA6C;AACzE,UAAM,SAAS,aAAa,MAAM,KAAK;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,WAAW,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,QACE,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,cAAc,OAAO;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAES,KAAK;AAAA,EACI,cAAc;AAAA,EAExB,cAA6B;AAAA,EAE7B,aAAqB;AAC3B,WAAO,KAAK,SAAS,cAAc;AAAA,EACrC;AAAA,EAEQ,UAAkB;AACxB,WAAO,KAAK,SAAS,YAAY,QAAQ,QAAQ,EAAE;AAAA,EACrD;AAAA,EAEA,MAAc,mBAAmB,QAAuC;AACtE,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,WAAW,KAAK,MAAM;AAAA,MACtB,eAAe,KAAK,MAAM;AAAA,MAC1B,eAAe,KAAK,MAAM;AAAA,IAC5B,CAAC,EAAE,SAAS;AACZ,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB,GAAG,KAAK,QAAQ,CAAC;AAAA,MACjB;AAAA,QACE,UAAU;AAAA,QACV,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,cAAc,mBAAmB,YAAY;AAAA,QAC/C;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe,QAAuC;AAClE,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc,MAAM,KAAK,mBAAmB,MAAM;AAAA,IACzD;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,OACZ,WACA,UACA,QAC0B;AAC1B,UAAM,MAAM,UAAU,WAAW,MAAM,IACnC,YACA,GAAG,KAAK,QAAQ,CAAC,GAAG,SAAS;AACjC,UAAM,QAAQ,MAAM,KAAK,eAAe,MAAM;AAC9C,WAAO,KAAK,IAAO,KAAK;AAAA,MACtB;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,QAAQ;AAAA,QACR,cAAc,mBAAmB,YAAY;AAAA,MAC/C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,uBAAuB,OAA0C;AACvE,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AACA,QAAI,MAAM,WAAW,iBAAiB,GAAG;AACvC,aAAO;AAAA,IACT;AACA,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,KAAK;AAC5B,UAAI,OAAO,SAAS,WAAW,iBAAiB,GAAG;AACjD,eAAO,OAAO,WAAW,OAAO;AAAA,MAClC;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,UACZ,OACA,MACA,SACA,QACoD;AACpD,QAAI;AACJ,QAAI,MAAM;AAIR,YAAM,WAAW,KAAK,uBAAuB,IAAI;AACjD,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,MAAM,mCAAmC,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO;AAAA,IACT,OAAO;AACL,YAAM,OAAO,eAAe,OAAO,QAAQ,KAAK;AAChD,YAAM,MAAM,IAAI;AAAA,QACd,GAAG,KAAK,QAAQ,CAAC,mBAAmB,KAAK,WAAW,CAAC;AAAA,MACvD;AACA,UAAI,aAAa,IAAI,KAAK,IAAI;AAC9B,aAAO,GAAG,IAAI,QAAQ,IAAI,IAAI,aAAa,SAAS,CAAC;AAAA,IACvD;AACA,UAAM,MAAM,MAAM,KAAK,OAA+B,MAAM,OAAO,MAAM;AACzE,WAAO;AAAA,MACL,OAAO,IAAI,KAAK;AAAA,MAChB,MAAM,IAAI,KAAK,OACX,OACA,KAAK,uBAAuB,IAAI,KAAK,cAAc;AAAA,IACzD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,WACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,OAAO,EAAE;AAAA,UACT,UAAU,EAAE;AAAA,QACd;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,UAAU,EAAE;AAAA,UACZ,eAAe,EAAE;AAAA,UACjB,SAAS,EAAE;AAAA,UACX,WAAW,YAAY,EAAE,WAAW;AAAA,QACtC;AAAA,QACA,YAAY,YAAY,EAAE,gBAAgB,KAAK;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,OAAO,EAAE;AAAA,UACT,QAAQ,EAAE;AAAA,UACV,QAAQ,EAAE;AAAA,UACV,aAAa,YAAY,EAAE,aAAa;AAAA,UACxC,WAAW,YAAY,EAAE,WAAW;AAAA,QACtC;AAAA,QACA,YAAY,YAAY,EAAE,gBAAgB,KAAK;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,OAAO,EAAE;AAAA,UACT,QAAQ,EAAE;AAAA,UACV,WAAW,YAAY,EAAE,SAAS;AAAA,UAClC,SAAS,EAAE;AAAA,UACX,aAAa,EAAE;AAAA,UACf,kBAAkB,EAAE;AAAA,UACpB,UAAU,EAAE;AAAA,UACZ,OAAO,EAAE;AAAA,UACT,WAAW,YAAY,EAAE,WAAW;AAAA,QACtC;AAAA,QACA,YAAY,YAAY,EAAE,gBAAgB,KAAK;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,uBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,KAAK,YAAY,EAAE,WAAW;AACpC,UAAI,OAAO,MAAM;AACf;AAAA,MACF;AACA,YAAM,QAAQ,MAAM;AAAA,QAClB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,YAAY;AAAA,UACV,WAAW,EAAE;AAAA,UACb,eAAe,EAAE;AAAA,UACjB,WAAW,EAAE;AAAA,UACb,SAAS,EAAE;AAAA,UACX,SAAS,EAAE;AAAA,QACb;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACA,OACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,WAAW,SAAS,KAAyB;AAAA,MAC3D,KAAK;AACH,eAAO,KAAK,cAAc,SAAS,KAA4B;AAAA,MACjE,KAAK;AACH,eAAO,KAAK,WAAW,SAAS,KAAyB;AAAA,MAC3D,KAAK;AACH,eAAO,KAAK;AAAA,UACV;AAAA,UACA;AAAA,QACF;AAAA,MACF,KAAK;AACH,eAAO,KAAK;AAAA,UACV;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,SACA,OACA,QACe;AACf,QAAI,UAAU,sBAAsB;AAGlC,UAAI,QAAQ;AACV,cAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAAA,MAC1D;AACA;AAAA,IACF;AACA,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,UAAM,aAAa,qBAAqB,KAAK;AAC7C,QAAI,YAAY;AACd,YAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,SACA,SACA,QACqB;AACrB,UAAM,SAAS,uBAAuB,QAAQ,MAAM,IAChD,QAAQ,SACR;AACJ,UAAM,SAAS,QAAQ,SAAS;AAEhC,UAAM,SAAS;AAAA,MACb,CAAC,MAAM;AAAA,MACP;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAEA,WAAO,gBAAyC;AAAA,MAC9C;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,WAAW,CAAC,OAAO,MAAM,QACvB,KAAK,UAAU,OAAO,MAAM,SAAS,GAAG;AAAA,MAC1C,YAAY,OAAO,OAAO,OAAO,SAAS;AACxC,YAAI,SAAS,MAAM;AACjB,gBAAM,KAAK,sBAAsB,SAAS,OAAO,MAAM;AAAA,QACzD;AACA,cAAM,KAAK,WAAW,SAAS,OAAO,KAAK;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AClzBA,IAAO,gBAAQ;","names":[]}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@rawdash/connector-salesforce",
+  "version": "0.0.1",
+  "description": "Rawdash connector for Salesforce — opportunities, stage-change events, accounts, leads, and users",
+  "license": "Apache-2.0",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rawdash/rawdash.git",
+    "directory": "packages/connectors/salesforce"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": {
+      "@rawdash/source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@rawdash/core": "workspace:*",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@rawdash/connector-shared": "workspace:*",
+    "@rawdash/connector-test-utils": "workspace:*",
+    "fast-check": "^4.8.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.2",
+    "vitest": "^4.1.4"
+  }
+}