@ryanstark24/sfgraph-core 1.1.0

package/dist/extractors/live-org/rate-limit.js

@@ -0,0 +1,251 @@
+import Bottleneck from "bottleneck";
+import pLimit from "p-limit";
+/** Cap concurrent query invocations against a single org connection. */
+export const queryLimit = pLimit(5);
+/**
+ * Hard upper bound on a single jsforce call. Used to wrap metadata.list /
+ * metadata.read calls in extractors so a Salesforce-side stall can't park
+ * the extractor (and therefore the sliding-window slot) indefinitely.
+ * Rejects with a descriptive error after `ms`; the failSoft wrapper one
+ * level up surfaces it as a skip. The underlying jsforce HTTP request may
+ * continue until libuv tears it down — we just stop waiting.
+ */
+export function withTimeout(p, ms, label) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(() => reject(new Error(`${label} timeout (${ms}ms)`)), ms);
+        p.then((v) => {
+            clearTimeout(t);
+            resolve(v);
+        }, (e) => {
+            clearTimeout(t);
+            reject(e);
+        });
+    });
+}
+/** Per-call ceilings — kept here so all extractors apply them consistently.
+ *  Read timeout raised 45s -> 120s. A single metadata.read of a heavy
+ *  Profile / Layout / Workflow legitimately takes 60-90s on production orgs;
+ *  45s was clipping perfectly-healthy reads. When a batch genuinely needs
+ *  longer than 120s, the streaming-split helper below recursively halves
+ *  the batch on timeout, so we still recover most records instead of
+ *  dropping the whole batch. */
+export const METADATA_LIST_TIMEOUT_MS = 30_000;
+export const METADATA_READ_TIMEOUT_MS = 120_000;
+/**
+ * Resilient metadata.read for a batch of items, with adaptive splitting on
+ * timeout. On a clean call, returns whatever Salesforce gave us (as an
+ * array). On any error, if the batch has >1 item, splits in half and
+ * retries each half in parallel — concatenating in original order so the
+ * caller can still index records against the original slice. A single
+ * item that times out is the genuine "this record cannot be ingested"
+ * case; we return `null` for it so the caller can record the skip
+ * without polluting the success path.
+ */
+export async function readMetadataBatchAdaptive(conn, type, items) {
+    if (items.length === 0)
+        return [];
+    try {
+        const raw = await scheduleMetadata(() => withTimeout(conn.metadata.read(type, items.map((i) => i.fullName)), METADATA_READ_TIMEOUT_MS, `metadata.read ${type}`));
+        const arr = Array.isArray(raw) ? raw : raw ? [raw] : [];
+        const out = [];
+        for (let i = 0; i < items.length; i += 1)
+            out.push(arr[i] ?? null);
+        return out;
+    }
+    catch (e) {
+        // Split only on NON-timeout errors. A timeout means Salesforce is slow
+        // per item, not that one bad record poisoned the batch — retrying with
+        // smaller batches each at the full timeout budget multiplies wall-clock
+        // time (e.g. a 10-item managed-package timeout cascade can balloon to
+        // 10×120s = 20 minutes before failing). Take the cleanest exit: skip
+        // the batch, emit nulls so the caller's indexing stays aligned.
+        const msg = e?.message ?? "";
+        const isTimeout = msg.includes("timeout (");
+        if (isTimeout || items.length === 1) {
+            return items.map(() => null);
+        }
+        const mid = Math.ceil(items.length / 2);
+        const [left, right] = await Promise.all([
+            readMetadataBatchAdaptive(conn, type, items.slice(0, mid)),
+            readMetadataBatchAdaptive(conn, type, items.slice(mid)),
+        ]);
+        return [...left, ...right];
+    }
+}
+function parseRetryAfter(err) {
+    if (!err || typeof err !== "object")
+        return null;
+    const e = err;
+    const direct = e.retryAfter;
+    if (typeof direct === "number" && Number.isFinite(direct))
+        return direct;
+    if (typeof direct === "string") {
+        const n = Number(direct);
+        if (Number.isFinite(n))
+            return n;
+    }
+    const hdr = e.headers?.["retry-after"] ?? e.headers?.["Retry-After"];
+    if (hdr) {
+        const n = Number(hdr);
+        if (Number.isFinite(n))
+            return n;
+    }
+    return null;
+}
+function attachRetryHandler(pool) {
+    pool.on("failed", (err, jobInfo) => {
+        // Only retry when Salesforce explicitly told us to wait, and only ONCE.
+        // Previously: defaulted REQUEST_LIMIT_EXCEEDED to a 30s wait and retried
+        // up to 3×. On a daily-limit-saturated org that cascade tied up pool
+        // slots for 90+s of dead time per failed call, starving every other
+        // source. If we can't infer a real retry-after, fail fast — failSoft
+        // surfaces a skip and the run keeps moving.
+        if (jobInfo.retryCount >= 1)
+            return null;
+        const wait = parseRetryAfter(err);
+        if (wait != null)
+            return wait * 1000;
+        return null;
+    });
+}
+/** Default concurrency. Metadata raised 5 -> 10 — under the sliding-window
+ *  source merger, security + flow + integration + several generic types all
+ *  schedule into this pool simultaneously. 5 slots backlogged the queue past
+ *  failSoft's 180s inactivity ceiling, causing whole sources to be killed
+ *  before their first batch ran. 10 stays well inside Salesforce's tolerance
+ *  for concurrent Metadata API reads and drains the queue ~2× faster. */
+export const DEFAULT_POOL_CONCURRENCY = {
+    tooling: 5,
+    metadata: 10,
+    data: 10,
+};
+function parsePositiveInt(raw) {
+    if (raw == null)
+        return undefined;
+    const n = Number.parseInt(raw, 10);
+    if (!Number.isFinite(n) || n <= 0)
+        return undefined;
+    return n;
+}
+/** Read `SFGRAPH_{TOOLING,METADATA,DATA}_POOL` env vars. Invalid / unset
+ *  entries leave the corresponding pool at its default. */
+function envOverrides() {
+    const out = {};
+    const t = parsePositiveInt(process.env.SFGRAPH_TOOLING_POOL);
+    const m = parsePositiveInt(process.env.SFGRAPH_METADATA_POOL);
+    const d = parsePositiveInt(process.env.SFGRAPH_DATA_POOL);
+    if (t !== undefined)
+        out.tooling = t;
+    if (m !== undefined)
+        out.metadata = m;
+    if (d !== undefined)
+        out.data = d;
+    return out;
+}
+/**
+ * Build a fresh independent {@link RateLimitPools} set. Each pool has its own
+ * Bottleneck reservoir, so two pool sets do not contend for budget.
+ *
+ * Concurrency resolution order: explicit `overrides` arg > `SFGRAPH_*_POOL`
+ * env vars > {@link DEFAULT_POOL_CONCURRENCY}.
+ */
+export function createRateLimitPools(overrides = {}) {
+    const env = envOverrides();
+    const toolingConc = overrides.tooling ?? env.tooling ?? DEFAULT_POOL_CONCURRENCY.tooling;
+    const metadataConc = overrides.metadata ?? env.metadata ?? DEFAULT_POOL_CONCURRENCY.metadata;
+    const dataConc = overrides.data ?? env.data ?? DEFAULT_POOL_CONCURRENCY.data;
+    // Pool sizing rule: reservoir refresh-rate must exceed maxConcurrent ×
+    // (1 / typical_call_latency_sec). Previous values capped the metadata
+    // pool at 5 req/sec (reservoir 50/10s) AND added a 100ms minTime — well
+    // below what maxConcurrent: 10 actually wanted to do for fast list calls.
+    // Result: pool throughput collapsed for entire 10s windows while reservoir
+    // refilled, manifesting as a "wedge" where 12 fan-out sources sat idle.
+    // 200/10s = 20 req/sec aligns the reservoir with maxConcurrent + typical
+    // 0.5–2s call latency. minTime: 0 lets maxConcurrent be the sole
+    // parallelism bound (it was the binding constraint anyway).
+    const toolingPool = new Bottleneck({
+        maxConcurrent: toolingConc,
+        minTime: 0,
+        reservoir: 200,
+        reservoirRefreshAmount: 200,
+        reservoirRefreshInterval: 10_000,
+    });
+    const metadataPool = new Bottleneck({
+        maxConcurrent: metadataConc,
+        minTime: 0,
+        reservoir: 200,
+        reservoirRefreshAmount: 200,
+        reservoirRefreshInterval: 10_000,
+    });
+    const dataPool = new Bottleneck({
+        maxConcurrent: dataConc,
+        minTime: 0,
+        reservoir: 200,
+        reservoirRefreshAmount: 200,
+        reservoirRefreshInterval: 10_000,
+    });
+    for (const p of [toolingPool, metadataPool, dataPool])
+        attachRetryHandler(p);
+    return {
+        toolingPool,
+        metadataPool,
+        dataPool,
+        scheduleQuery(fn) {
+            return toolingPool.schedule(() => queryLimit(fn));
+        },
+        scheduleMetadata(fn) {
+            return metadataPool.schedule(fn);
+        },
+        scheduleData(fn) {
+            return dataPool.schedule(fn);
+        },
+    };
+}
+// Process-level default set. Existing module-level singletons continue to work.
+const defaultPools = createRateLimitPools();
+export const toolingPool = defaultPools.toolingPool;
+export const metadataPool = defaultPools.metadataPool;
+export const dataPool = defaultPools.dataPool;
+/**
+ * Back-compat alias. The original `limiter` export is preserved so callers
+ * that haven't migrated to a specific pool continue to work; it points at
+ * the tooling pool (the closest match to the previous single-pool defaults).
+ */
+export const limiter = toolingPool;
+/** Helper that runs a single SOQL/Tooling callable through both gates. */
+export function scheduleQuery(fn) {
+    return defaultPools.scheduleQuery(fn);
+}
+/** Schedule a Metadata API call (list/read/retrieve/deploy). */
+export function scheduleMetadata(fn) {
+    return defaultPools.scheduleMetadata(fn);
+}
+/** Schedule a SObject SOQL / Bulk query (Vlocity, CMDT, generic records). */
+export function scheduleData(fn) {
+    return defaultPools.scheduleData(fn);
+}
+/**
+ * Mutate the *default* (process-level) pools' concurrency caps at runtime.
+ * Used by the CLI when `--tooling-pool` / `--metadata-pool` / `--data-pool`
+ * flags are passed — by the time those flags are parsed, the singletons have
+ * already been instantiated, so we can't influence them through the
+ * constructor. Bottleneck supports live updates via `updateSettings`.
+ *
+ * Returns the concurrency caps actually applied (after merging defaults +
+ * env vars + overrides), so callers can log what the user got.
+ */
+export async function configureDefaultPools(overrides = {}) {
+    const env = envOverrides();
+    const tooling = overrides.tooling ?? env.tooling ?? DEFAULT_POOL_CONCURRENCY.tooling;
+    const metadata = overrides.metadata ?? env.metadata ?? DEFAULT_POOL_CONCURRENCY.metadata;
+    const data = overrides.data ?? env.data ?? DEFAULT_POOL_CONCURRENCY.data;
+    // Bottleneck.updateSettings returns a Promise — must await so subsequent
+    // schedules see the new cap.
+    await Promise.all([
+        toolingPool.updateSettings({ maxConcurrent: tooling }),
+        metadataPool.updateSettings({ maxConcurrent: metadata }),
+        dataPool.updateSettings({ maxConcurrent: data }),
+    ]);
+    return { tooling, metadata, data };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/extractors/live-org/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/extractors/live-org/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,MAAM,MAAM,SAAS,CAAC;AAE7B,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,KAAa;IACrE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;gCAMgC;AAChC,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAiF,EACjF,IAAY,EACZ,KAAc;IAEd,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACtC,WAAW,CACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,IAAI,EACJ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC7B,EACD,wBAAwB,EACxB,iBAAiB,IAAI,EAAE,CACxB,CACF,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,GAAG,GAAI,CAAW,EAAE,OAAO,IAAI,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,yBAAyB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,yBAAyB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAsBD,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAKT,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzE,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,OAAO,EAAE,EAAE;QAC1C,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,4CAA4C;QAC5C,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,GAAG,IAAI,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAaD;;;;;yEAKyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;CACA,CAAC;AAEX,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;2DAC2D;AAC3D,SAAS,YAAY;IACnB,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAsC,EAAE;IAC3E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,wBAAwB,CAAC,OAAO,CAAC;IACzF,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,wBAAwB,CAAC,QAAQ,CAAC;IAC7F,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC;IAC7E,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,iEAAiE;IACjE,4DAA4D;IAC5D,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC;QACjC,aAAa,EAAE,WAAW;QAC1B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,GAAG;QACd,sBAAsB,EAAE,GAAG;QAC3B,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC;QAClC,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,GAAG;QACd,sBAAsB,EAAE,GAAG;QAC3B,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC;QAC9B,aAAa,EAAE,QAAQ;QACvB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,GAAG;QACd,sBAAsB,EAAE,GAAG;QAC3B,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC;QAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAE7E,OAAO;QACL,WAAW;QACX,YAAY;QACZ,QAAQ;QACR,aAAa,CAAI,EAAoB;YACnC,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,gBAAgB,CAAI,EAAoB;YACtC,OAAO,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,YAAY,CAAI,EAAoB;YAClC,OAAO,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;AACpD,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC;AACtD,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC;AAEnC,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAI,EAAoB;IACnD,OAAO,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAI,EAAoB;IACtD,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAI,EAAoB;IAClD,OAAO,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAsC,EAAE;IAExC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,wBAAwB,CAAC,OAAO,CAAC;IACrF,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,wBAAwB,CAAC,QAAQ,CAAC;IACzF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC;IACzE,yEAAyE;IACzE,6BAA6B;IAC7B,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,WAAW,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QACtD,YAAY,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;QACxD,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/extractors/live-org/read-only-proxy.d.ts

@@ -0,0 +1,2 @@
+export declare function wrapConnectionReadOnly<T extends object>(conn: T): T;
+//# sourceMappingURL=read-only-proxy.d.ts.map

package/dist/extractors/live-org/read-only-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only-proxy.d.ts","sourceRoot":"","sources":["../../../src/extractors/live-org/read-only-proxy.ts"],"names":[],"mappings":"AAmQA,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CA0CnE"}

package/dist/extractors/live-org/read-only-proxy.js

@@ -0,0 +1,299 @@
+import { ReadOnlyViolationError } from "@ryanstark24/sfgraph-shared";
+const SOBJECT_WRITE_METHODS = new Set([
+    "create",
+    "insert",
+    "update",
+    "upsert",
+    "delete",
+    "del",
+    "destroy",
+    "createBulk",
+    "updateBulk",
+    "upsertBulk",
+    "deleteBulk",
+]);
+const METADATA_WRITE_METHODS = new Set([
+    "create",
+    "update",
+    "upsert",
+    "delete",
+    "deploy",
+    "rename",
+]);
+/**
+ * Tooling API has its own top-level write methods in addition to
+ * tooling.sobject(...).create/update/etc. Block them all. Includes
+ * 'executeAnonymous' because anonymous Apex can mutate data even though
+ * the call itself is technically a "query".
+ */
+const TOOLING_TOP_LEVEL_WRITE_METHODS = new Set([
+    "create",
+    "insert",
+    "update",
+    "upsert",
+    "delete",
+    "del",
+    "destroy",
+    "deploy",
+    "rename",
+    "executeAnonymous",
+    "runTests",
+    "runTestsAsynchronous",
+    "runTestsSynchronous",
+    "createAsync",
+    "updateAsync",
+    "deleteAsync",
+    "deployAsync",
+    "requestPost",
+    "requestPut",
+    "requestPatch",
+    "requestDelete",
+]);
+const ROOT_WRITE_METHODS = new Set([
+    "create",
+    "update",
+    "upsert",
+    "delete",
+    "del",
+    "destroy",
+    "recreate",
+    "requestPost",
+    "requestPut",
+    "requestPatch",
+    "requestDelete",
+]);
+const SAFE_HTTP_METHODS = new Set(["GET", "HEAD"]);
+/**
+ * Union of every known write-shaped method name across all jsforce surfaces.
+ * Used by `wrapGenericSurface` to default-deny unknown surfaces (soap, apex,
+ * chatter, etc.) — anything callable named `create`, `delete`, `deploy`,
+ * `upsert`, ... is blocked even when the surface itself isn't explicitly
+ * modelled. Adding new write surfaces to jsforce won't silently bypass the
+ * proxy this way.
+ */
+const ANY_WRITE_METHOD = new Set([
+    ...SOBJECT_WRITE_METHODS,
+    ...METADATA_WRITE_METHODS,
+    ...TOOLING_TOP_LEVEL_WRITE_METHODS,
+    ...ROOT_WRITE_METHODS,
+]);
+/**
+ * Names of "make me a job/batch" entry points that take an `operation` field.
+ * The wrapper inspects the operation and blocks anything not query-shaped.
+ */
+const JOB_CREATOR_METHODS = new Set(["createJob"]);
+function violation(op) {
+    throw new ReadOnlyViolationError(`read-only Salesforce connection: '${op}' is blocked at runtime`);
+}
+function blockingFn(name) {
+    return () => violation(name);
+}
+function wrapSObject(target, label) {
+    return new Proxy(target, {
+        get(t, prop, receiver) {
+            if (typeof prop === "string" && SOBJECT_WRITE_METHODS.has(prop)) {
+                return blockingFn(`${label}.${prop}`);
+            }
+            const val = Reflect.get(t, prop, receiver);
+            return typeof val === "function" ? val.bind(t) : val;
+        },
+    });
+}
+function wrapMetadata(target) {
+    return new Proxy(target, {
+        get(t, prop, receiver) {
+            if (typeof prop === "string" && METADATA_WRITE_METHODS.has(prop)) {
+                return blockingFn(`metadata.${String(prop)}`);
+            }
+            const val = Reflect.get(t, prop, receiver);
+            return typeof val === "function" ? val.bind(t) : val;
+        },
+    });
+}
+function isReadishOperation(op) {
+    const s = String(op ?? "").toLowerCase();
+    return s === "query" || s === "queryall";
+}
+function wrapTooling(target) {
+    return new Proxy(target, {
+        get(t, prop, receiver) {
+            // P0: never expose the back-reference to the raw connection
+            // (jsforce stashes the parent conn on `_conn`). Reachable raw it
+            // would bypass every check above.
+            if (typeof prop === "string" && prop.startsWith("_"))
+                return undefined;
+            if (prop === "sobject") {
+                const original = Reflect.get(t, prop, receiver);
+                if (typeof original !== "function")
+                    return original;
+                return (name) => wrapSObject(original.call(t, name), `tooling.sobject(${name})`);
+            }
+            // P0 fix: previously only tooling.sobject was wrapped, so callers could
+            // hit conn.tooling.delete(...), conn.tooling.executeAnonymous(...),
+            // conn.tooling.requestPost(...) etc. directly. Block every top-level
+            // tooling write method.
+            if (typeof prop === "string" && TOOLING_TOP_LEVEL_WRITE_METHODS.has(prop)) {
+                return blockingFn(`tooling.${String(prop)}`);
+            }
+            // Block conn.tooling.request(...) when method is not GET/HEAD, mirroring
+            // the root-level request gate.
+            if (prop === "request") {
+                const original = Reflect.get(t, prop, receiver);
+                if (typeof original !== "function")
+                    return original;
+                return (...args) => {
+                    const first = args[0];
+                    if (typeof first === "object" && first !== null) {
+                        const methodVal = first.method;
+                        const method = typeof methodVal === "string" ? methodVal.toUpperCase() : "GET";
+                        if (!SAFE_HTTP_METHODS.has(method))
+                            violation(`tooling.request(${method})`);
+                    }
+                    if (typeof first === "string") {
+                        const method = typeof args[1] === "string" ? args[1].toUpperCase() : "GET";
+                        if (!SAFE_HTTP_METHODS.has(method))
+                            violation(`tooling.request(${method})`);
+                    }
+                    return original.call(t, ...args);
+                };
+            }
+            const val = Reflect.get(t, prop, receiver);
+            return typeof val === "function" ? val.bind(t) : val;
+        },
+    });
+}
+function wrapBulk(target) {
+    return new Proxy(target, {
+        get(t, prop, receiver) {
+            if (typeof prop === "string" && prop.startsWith("_"))
+                return undefined;
+            if (prop === "load") {
+                return (sobjectName, operation, ...rest) => {
+                    if (!isReadishOperation(operation)) {
+                        violation(`bulk.load(${sobjectName}, ${operation})`);
+                    }
+                    const orig = Reflect.get(t, prop, receiver);
+                    return orig.call(t, sobjectName, operation, ...rest);
+                };
+            }
+            // P0: jsforce also exposes bulk.createJob({ operation }) as a
+            // lower-level entry point. Mirror the read-only gate.
+            if (typeof prop === "string" && JOB_CREATOR_METHODS.has(prop)) {
+                const original = Reflect.get(t, prop, receiver);
+                if (typeof original !== "function")
+                    return original;
+                return (jobOpts, ...rest) => {
+                    const op = jobOpts?.operation;
+                    if (!isReadishOperation(op))
+                        violation(`bulk.${String(prop)}(${String(op)})`);
+                    return original.call(t, jobOpts, ...rest);
+                };
+            }
+            // P0: bulk.job(jobId).batch(...) chain. Wrap any returned job so its
+            // create/update/delete methods are blocked. Read methods (`check`,
+            // `list`, `retrieve`) pass through. We only know to block writes here
+            // because the chain is too dynamic to enumerate exhaustively.
+            if (prop === "job") {
+                const original = Reflect.get(t, prop, receiver);
+                if (typeof original !== "function")
+                    return original;
+                return (...args) => {
+                    const job = original.call(t, ...args);
+                    return wrapGenericSurface(job, "bulk.job(...)");
+                };
+            }
+            const val = Reflect.get(t, prop, receiver);
+            return typeof val === "function" ? val.bind(t) : val;
+        },
+    });
+}
+/**
+ * Last-line defence for surfaces we haven't modelled explicitly (soap, apex,
+ * chatter, analytics, bulk2, ...). Default-denies any property name from the
+ * union write set and hides `_`-prefixed internals.
+ */
+function wrapGenericSurface(target, label) {
+    if (target === null || typeof target !== "object")
+        return target;
+    return new Proxy(target, {
+        get(t, prop, receiver) {
+            if (typeof prop === "string") {
+                if (prop.startsWith("_"))
+                    return undefined;
+                if (ANY_WRITE_METHOD.has(prop)) {
+                    return blockingFn(`${label}.${prop}`);
+                }
+                if (JOB_CREATOR_METHODS.has(prop)) {
+                    const original = Reflect.get(t, prop, receiver);
+                    if (typeof original !== "function")
+                        return original;
+                    return (jobOpts, ...rest) => {
+                        const op = jobOpts?.operation;
+                        if (!isReadishOperation(op)) {
+                            violation(`${label}.${String(prop)}(${String(op)})`);
+                        }
+                        return original.call(t, jobOpts, ...rest);
+                    };
+                }
+            }
+            const val = Reflect.get(t, prop, receiver);
+            return typeof val === "function" ? val.bind(t) : val;
+        },
+    });
+}
+function wrapRequest(target, originalRequest) {
+    return (info, ...rest) => {
+        const method = typeof info === "string" ? "GET" : String(info?.method ?? "GET").toUpperCase();
+        if (!SAFE_HTTP_METHODS.has(method)) {
+            violation(`request(${method})`);
+        }
+        return originalRequest.call(target, info, ...rest);
+    };
+}
+export function wrapConnectionReadOnly(conn) {
+    return new Proxy(conn, {
+        get(target, prop, receiver) {
+            // P0: hide jsforce internals (_conn, _logger, etc.) so callers can't
+            // reach the raw connection and bypass the proxy.
+            if (typeof prop === "string" && prop.startsWith("_"))
+                return undefined;
+            if (typeof prop === "string" && ROOT_WRITE_METHODS.has(prop)) {
+                return blockingFn(prop);
+            }
+            if (prop === "sobject") {
+                const original = Reflect.get(target, prop, receiver);
+                if (typeof original !== "function")
+                    return original;
+                return (name) => wrapSObject(original.call(target, name), `sobject(${name})`);
+            }
+            if (prop === "tooling") {
+                const t = Reflect.get(target, prop, receiver);
+                return t ? wrapTooling(t) : t;
+            }
+            if (prop === "metadata") {
+                const m = Reflect.get(target, prop, receiver);
+                return m ? wrapMetadata(m) : m;
+            }
+            if (prop === "bulk") {
+                const b = Reflect.get(target, prop, receiver);
+                return b ? wrapBulk(b) : b;
+            }
+            if (prop === "request") {
+                const r = Reflect.get(target, prop, receiver);
+                if (typeof r !== "function")
+                    return r;
+                return wrapRequest(target, r);
+            }
+            // P0: any other API surface (soap, bulk2, apex, chatter, analytics,
+            // streaming, ...) goes through the generic default-deny wrapper. This
+            // prevents `conn.soap.create({})`, `conn.bulk2.createJob({operation:'insert'})`,
+            // `conn.apex.post(...)`, etc. from sneaking past the explicit allowlist.
+            const val = Reflect.get(target, prop, receiver);
+            if (val !== null && typeof val === "object") {
+                return wrapGenericSurface(val, String(prop));
+            }
+            return typeof val === "function" ? val.bind(target) : val;
+        },
+    });
+}
+//# sourceMappingURL=read-only-proxy.js.map

package/dist/extractors/live-org/read-only-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only-proxy.js","sourceRoot":"","sources":["../../../src/extractors/live-org/read-only-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,kBAAkB;IAClB,UAAU;IACV,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;IACb,aAAa;IACb,aAAa;IACb,aAAa;IACb,aAAa;IACb,YAAY;IACZ,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,+BAA+B;IAClC,GAAG,kBAAkB;CACtB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAEnD,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EAAE,yBAAyB,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,MAAW,EAAE,KAAa;IAC7C,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ;YACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,OAAO,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAAW;IAC/B,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ;YACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjE,OAAO,UAAU,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAW;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,UAAU,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,MAAW;IAC9B,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ;YACnB,4DAA4D;YAC5D,iEAAiE;YACjE,kCAAkC;YAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC;gBACpD,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,mBAAmB,IAAI,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,wEAAwE;YACxE,oEAAoE;YACpE,qEAAqE;YACrE,wBAAwB;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,+BAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1E,OAAO,UAAU,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,yEAAyE;YACzE,+BAA+B;YAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC;gBACpD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAY,CAAC;oBACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBAChD,MAAM,SAAS,GAAI,KAA8B,CAAC,MAAM,CAAC;wBACzD,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;wBAC/E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;4BAAE,SAAS,CAAC,mBAAmB,MAAM,GAAG,CAAC,CAAC;oBAC9E,CAAC;oBACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;wBACvF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;4BAAE,SAAS,CAAC,mBAAmB,MAAM,GAAG,CAAC,CAAC;oBAC9E,CAAC;oBACD,OAAQ,QAAyC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;gBACrE,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAAW;IAC3B,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ;YACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,WAAmB,EAAE,SAAiB,EAAE,GAAG,IAAe,EAAE,EAAE;oBACpE,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;wBACnC,SAAS,CAAC,aAAa,WAAW,KAAK,SAAS,GAAG,CAAC,CAAC;oBACvD,CAAC;oBACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAC5C,OAAQ,IAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC;gBACrE,CAAC,CAAC;YACJ,CAAC;YACD,8DAA8D;YAC9D,sDAAsD;YACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC;gBACpD,OAAO,CAAC,OAAgB,EAAE,GAAG,IAAe,EAAE,EAAE;oBAC9C,MAAM,EAAE,GAAI,OAA0C,EAAE,SAAS,CAAC;oBAClE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAAE,SAAS,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAC9E,OAAQ,QAAyC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC9E,CAAC,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,mEAAmE;YACnE,sEAAsE;YACtE,8DAA8D;YAC9D,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC;gBACpD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,GAAG,GAAI,QAAyC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;oBACxE,OAAO,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;gBAClD,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,MAAW,EAAE,KAAa;IACpD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACjE,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ;YACnB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAC3C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,OAAO,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAChD,IAAI,OAAO,QAAQ,KAAK,UAAU;wBAAE,OAAO,QAAQ,CAAC;oBACpD,OAAO,CAAC,OAAgB,EAAE,GAAG,IAAe,EAAE,EAAE;wBAC9C,MAAM,EAAE,GAAI,OAA0C,EAAE,SAAS,CAAC;wBAClE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;4BAC5B,SAAS,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;wBACvD,CAAC;wBACD,OAAQ,QAAyC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;oBAC9E,CAAC,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAW,EAAE,eAAyB;IACzD,OAAO,CAAC,IAAS,EAAE,GAAG,IAAe,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9F,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,WAAW,MAAM,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAmB,IAAO;IAC9D,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,qEAAqE;YACrE,iDAAiD;YACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACrD,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC;gBACpD,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,UAAU;oBAAE,OAAO,CAAC,CAAC;gBACtC,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChC,CAAC;YACD,oEAAoE;YACpE,sEAAsE;YACtE,iFAAiF;YACjF,yEAAyE;YACzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,CAAC;KACF,CAAM,CAAC;AACV,CAAC"}

package/dist/extractors/live-org/reports.d.ts

@@ -0,0 +1,4 @@
+import type { RawMember } from "../interfaces/metadata-source.js";
+/** Phase 6 placeholder — emits nothing today. */
+export declare function iterReports(_conn: any): AsyncIterable<RawMember>;
+//# sourceMappingURL=reports.d.ts.map

package/dist/extractors/live-org/reports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.d.ts","sourceRoot":"","sources":["../../../src/extractors/live-org/reports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAEhE"}

package/dist/extractors/live-org/reports.js

@@ -0,0 +1,10 @@
+/** Phase 6 placeholder — emits nothing today. */
+export function iterReports(_conn) {
+    return emptyAsyncIterable();
+}
+async function* emptyAsyncIterable() {
+    // intentional: phase-6 stub
+    if (false)
+        yield undefined;
+}
+//# sourceMappingURL=reports.js.map

package/dist/extractors/live-org/reports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.js","sourceRoot":"","sources":["../../../src/extractors/live-org/reports.ts"],"names":[],"mappings":"AAEA,iDAAiD;AACjD,MAAM,UAAU,WAAW,CAAC,KAAU;IACpC,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,kBAAkB;IAChC,4BAA4B;IAC5B,IAAI,KAAgB;QAAE,MAAM,SAAiC,CAAC;AAChE,CAAC"}

package/dist/extractors/live-org/source-member.d.ts

@@ -0,0 +1,8 @@
+import type { OrgId } from "@ryanstark24/sfgraph-shared";
+import type { MemberRef } from "../interfaces/metadata-source.js";
+/**
+ * Iterate over Salesforce Tooling SourceMember rows modified after `sinceIso`.
+ * Deletions surface with `obsolete: true` and an empty source URI suffix.
+ */
+export declare function iterChanges(conn: any, _orgId: OrgId, sinceIso: string): AsyncIterable<MemberRef>;
+//# sourceMappingURL=source-member.d.ts.map

package/dist/extractors/live-org/source-member.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-member.d.ts","sourceRoot":"","sources":["../../../src/extractors/live-org/source-member.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AA2BlE;;;GAGG;AACH,wBAAuB,WAAW,CAChC,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,KAAK,EACb,QAAQ,EAAE,MAAM,GACf,aAAa,CAAC,SAAS,CAAC,CAyB1B"}