@ryanstark24/sfgraph-server 1.1.0

package/dist/tools/list_orgs.js

@@ -0,0 +1,302 @@
+import { existsSync, readdirSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { loadBetterSqlite3 } from "@ryanstark24/sfgraph-core";
+import { getSfgraphPaths, validateOrgIdentifier } from "@ryanstark24/sfgraph-shared";
+const nodeRequire = createRequire(import.meta.url);
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({}).strict();
+const DAY_MS = 1000 * 60 * 60 * 24;
+const STALE_THRESHOLD_DAYS = 7;
+let depsOverride = null;
+/** Test seam — replace the SF core loader / DB opener / paths. */
+export function __setListOrgsDeps(d) {
+    depsOverride = d;
+}
+/** Read the alias map + authorizations from the install-time snapshot if it
+ *  exists. The snapshot is written by `sfgraph install` running OUTSIDE the
+ *  sandbox, then read by the sandboxed MCP child here. This is the only
+ *  reliable alias source when Cursor's sandbox blocks ~/.sf/alias.json. */
+function readSnapshot(dataDir) {
+    try {
+        const p = path.join(dataDir, "orgs-snapshot.json");
+        if (!existsSync(p))
+            return null;
+        const { readFileSync } = nodeRequire("node:fs");
+        const raw = JSON.parse(readFileSync(p, "utf8"));
+        const aliasByUsername = new Map();
+        for (const [alias, username] of Object.entries(raw.aliases ?? {})) {
+            if (typeof username === "string")
+                aliasByUsername.set(username, alias);
+        }
+        const authorizations = Object.entries(raw.authorizations ?? {}).map(([username, info]) => ({
+            alias: aliasByUsername.get(username) ?? null,
+            username,
+            orgId: info.orgId,
+            instanceUrl: info.instanceUrl,
+        }));
+        return {
+            defaultAlias: raw.defaultAlias ?? null,
+            aliasByUsername,
+            authorizations,
+            recordedAt: typeof raw.recordedAt === "number" ? raw.recordedAt : null,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+async function defaultLoadSfCore() {
+    const modName = "@salesforce/core";
+    const sfCore = (await import(modName));
+    const aliasByUsername = new Map();
+    if (sfCore.StateAggregator?.create) {
+        try {
+            const agg = await sfCore.StateAggregator.create();
+            const all = agg.aliases.getAll();
+            for (const [alias, username] of Object.entries(all)) {
+                if (typeof username === "string" && username.length > 0) {
+                    aliasByUsername.set(username, alias);
+                }
+            }
+        }
+        catch {
+            // StateAggregator failed; alias enumeration just stays empty.
+        }
+    }
+    return { AuthInfo: sfCore.AuthInfo, aliasByUsername };
+}
+async function defaultResolveDefault() {
+    try {
+        const mod = (await import("@ryanstark24/sfgraph-core"));
+        if (typeof mod.resolveDefaultOrgAlias === "function") {
+            return await mod.resolveDefaultOrgAlias();
+        }
+    }
+    catch {
+        // ignore
+    }
+    return null;
+}
+/** Diagnostic counter — captured into the summary so silent open failures
+ *  (missing native binding, wrong arch, etc.) don't hide behind '0 orgs'. */
+let lastOpenDbError = null;
+function defaultOpenDb(p) {
+    if (!existsSync(p))
+        return null;
+    try {
+        const Database = loadBetterSqlite3(nodeRequire);
+        const db = new Database(p, { readonly: true, fileMustExist: true });
+        return db;
+    }
+    catch (e) {
+        lastOpenDbError = e.message;
+        return null;
+    }
+}
+defineTool({
+    name: "list_orgs",
+    description: "USE THIS as the FIRST step in any sfgraph workflow to enumerate the user's available Salesforce orgs and their ingest status. Shows aliases, orgIds, default-org marker, ingested-locally flag, last-synced timestamp, stale flag. Works even when the sf CLI auth isn't reachable from this process (falls back to scanning the local data dir).",
+    inputSchema,
+    async execute(_input) {
+        const deps = depsOverride ?? {};
+        const loadSfCore = deps.loadSfCore ?? defaultLoadSfCore;
+        const resolveDefault = deps.resolveDefaultOrgAlias ?? defaultResolveDefault;
+        const dataDir = deps.dataDir ?? getSfgraphPaths().data;
+        const openDb = deps.openDb ?? defaultOpenDb;
+        let auths = [];
+        let aliasByUsername = new Map();
+        let loadError = null;
+        try {
+            const sfCore = await loadSfCore();
+            auths = await sfCore.AuthInfo.listAllAuthorizations();
+            if (sfCore.aliasByUsername)
+                aliasByUsername = sfCore.aliasByUsername;
+        }
+        catch (e) {
+            loadError = e.message;
+        }
+        let defaultAlias = null;
+        try {
+            defaultAlias = await resolveDefault();
+        }
+        catch {
+            defaultAlias = null;
+        }
+        // Sandbox fallback: when the MCP child can't read ~/.sf/ directly
+        // (Cursor's macOS sandbox), AuthInfo/StateAggregator/ConfigAggregator
+        // all come back empty. `sfgraph install` runs OUTSIDE the sandbox and
+        // snapshots that state to <dataDir>/orgs-snapshot.json. Merge it in
+        // here as the authoritative source when the live calls returned
+        // nothing useful.
+        const snap = readSnapshot(dataDir);
+        if (snap) {
+            if (auths.length === 0)
+                auths = snap.authorizations;
+            if (aliasByUsername.size === 0)
+                aliasByUsername = snap.aliasByUsername;
+            if (!defaultAlias && snap.defaultAlias)
+                defaultAlias = snap.defaultAlias;
+        }
+        const now = Date.now();
+        const byOrgId = new Map();
+        // Pass 1 — orgs visible via @salesforce/core (the sf CLI auth dir).
+        // When the MCP server runs as a child process of Cursor / Claude with
+        // no shell env, this call sometimes returns empty even though the user
+        // is authenticated in their shell. Pass 2 below catches that case by
+        // scanning the local data dir for ingested orgs.
+        for (const a of auths) {
+            const username = a.username ?? "";
+            // Prefer the alias on the AuthorizationRow; if absent, fall back to
+            // the username -> alias map from StateAggregator. This is the actual
+            // fix for 'all aliases show _none_': AuthInfo.listAllAuthorizations
+            // routinely returns alias=null even when `sf org list` shows one.
+            const alias = (a.alias ?? null) || aliasByUsername.get(username) || null;
+            const orgId = a.orgId ?? "";
+            const instanceUrl = a.instanceUrl ?? "";
+            const isDefault = !!defaultAlias && (defaultAlias === alias || defaultAlias === username);
+            if (!orgId)
+                continue;
+            // Try to open this org's local DB to read last-synced timestamp.
+            let lastSyncedAt = null;
+            let ingested = false;
+            const dbPath = path.join(dataDir, `${orgId}.sqlite`);
+            const db = openDb(dbPath);
+            if (db) {
+                ingested = true;
+                try {
+                    const row = db
+                        .prepare("SELECT last_synced_at FROM _sfgraph_orgs WHERE id = ?")
+                        .get(orgId);
+                    if (row && row.last_synced_at != null) {
+                        lastSyncedAt = Number(row.last_synced_at);
+                    }
+                }
+                catch {
+                    // table missing or schema older than v4
+                }
+                try {
+                    db.close();
+                }
+                catch {
+                    // ignore
+                }
+            }
+            byOrgId.set(orgId, {
+                alias,
+                username,
+                orgId,
+                instanceUrl,
+                isDefault,
+                ingested,
+                lastSyncedAt,
+                ageDays: null,
+                stale: true,
+            });
+        }
+        // Pass 2 — orgs visible via the local data dir. ANY <orgId>.sqlite that
+        // contains an _sfgraph_orgs row is a valid usable graph regardless of
+        // whether the sf CLI auth is currently accessible to this process.
+        if (existsSync(dataDir)) {
+            let files = [];
+            try {
+                files = readdirSync(dataDir).filter((f) => f.endsWith(".sqlite") && !f.startsWith("backups"));
+            }
+            catch {
+                files = [];
+            }
+            for (const f of files) {
+                const orgId = f.replace(/\.sqlite$/, "");
+                if (!orgId || orgId.includes("/"))
+                    continue;
+                // Harden: skip any file whose stem isn't a valid org identifier.
+                try {
+                    validateOrgIdentifier(orgId);
+                }
+                catch {
+                    continue;
+                }
+                const dbPath = path.join(dataDir, f);
+                const db = openDb(dbPath);
+                if (!db)
+                    continue;
+                let storedAlias = null;
+                let storedInstance = null;
+                let lastSyncedAt = null;
+                try {
+                    const row = db
+                        .prepare("SELECT alias, instance_url, last_synced_at FROM _sfgraph_orgs WHERE id = ?")
+                        .get(orgId);
+                    if (row) {
+                        storedAlias = row.alias ?? null;
+                        storedInstance = row.instance_url ?? null;
+                        if (row.last_synced_at != null)
+                            lastSyncedAt = Number(row.last_synced_at);
+                    }
+                }
+                catch {
+                    // table missing or schema older than v4
+                }
+                try {
+                    db.close();
+                }
+                catch {
+                    // ignore
+                }
+                const existing = byOrgId.get(orgId);
+                if (existing) {
+                    existing.ingested = true;
+                    if (lastSyncedAt != null)
+                        existing.lastSyncedAt = lastSyncedAt;
+                }
+                else {
+                    byOrgId.set(orgId, {
+                        alias: storedAlias,
+                        username: "",
+                        orgId,
+                        instanceUrl: storedInstance ?? "",
+                        isDefault: !!defaultAlias && !!storedAlias && defaultAlias === storedAlias,
+                        ingested: true,
+                        lastSyncedAt,
+                        ageDays: null,
+                        stale: true,
+                    });
+                }
+            }
+        }
+        const orgs = [...byOrgId.values()].map((o) => {
+            const ageDays = o.lastSyncedAt != null ? Math.floor((now - o.lastSyncedAt) / DAY_MS) : null;
+            const stale = ageDays == null ? true : ageDays >= STALE_THRESHOLD_DAYS;
+            return { ...o, ageDays, stale };
+        });
+        const rows = orgs
+            .map((o) => `| ${o.alias ?? "_none_"} | \`${o.orgId || "_unknown_"}\` | ${o.isDefault ? "yes" : ""} | ${o.ingested ? "yes" : "no"} | ${o.lastSyncedAt != null ? new Date(o.lastSyncedAt).toISOString() : "_never_"} | ${o.stale ? "yes" : "no"} |`)
+            .join("\n");
+        const header = "| Alias | Org Id | Default | Ingested | Last Synced | Stale |\n|---|---|---|---|---|---|";
+        const md = orgs.length === 0 ? "_no orgs_" : `${header}\n${rows}`;
+        const authCount = auths.length;
+        const ingestedCount = orgs.filter((o) => o.ingested).length;
+        const dbErrSuffix = lastOpenDbError ? ` [openDb error: ${lastOpenDbError}]` : "";
+        // Surface snapshot age. If the install-time snapshot is older than 7
+        // days, the user has likely changed sf state (logged into a new org,
+        // re-aliased, flipped target-org) and the in-MCP list is stale.
+        let snapshotSuffix = "";
+        if (snap?.recordedAt) {
+            const ageDays = Math.floor((now - snap.recordedAt) / DAY_MS);
+            if (ageDays >= STALE_THRESHOLD_DAYS) {
+                snapshotSuffix = ` ⚠ org snapshot is ${ageDays} days old — run \`sfgraph refresh-orgs\` to pick up any sf-CLI changes`;
+            }
+        }
+        const summary = loadError
+            ? `sf-cli auth unavailable in this process (${loadError}); discovered ${orgs.length} org${orgs.length === 1 ? "" : "s"} from local sfgraph data dir (${ingestedCount} ingested)${dbErrSuffix}${snapshotSuffix}`
+            : `${orgs.length} org${orgs.length === 1 ? "" : "s"} total — ${authCount} via sf CLI, ${ingestedCount} ingested locally${dbErrSuffix}${snapshotSuffix}`;
+        // Reset for next invocation so a transient error doesn't stick.
+        lastOpenDbError = null;
+        return {
+            summary,
+            markdown: md,
+            data: { orgs, defaultAlias },
+        };
+    },
+});
+//# sourceMappingURL=list_orgs.js.map

package/dist/tools/list_orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_orgs.js","sourceRoot":"","sources":["../../src/tools/list_orgs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAErF,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACnC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AA2B/B,IAAI,YAAY,GAAwB,IAAI,CAAC;AAE7C,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,CAAsB;IACtD,YAAY,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;2EAG2E;AAC3E,SAAS,YAAY,CAAC,OAAe;IAMnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,SAAS,CAA6B,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAK7C,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,cAAc,GAAuB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CACrF,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI;YAC5C,QAAQ;YACR,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CACH,CAAC;QACF,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;YACtC,eAAe;YACf,cAAc;YACd,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;SACvE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB;IAU9B,MAAM,OAAO,GAAG,kBAAkB,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CASpC,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,IAAI,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxD,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAErD,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;YACrD,OAAO,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;6EAC6E;AAC7E,IAAI,eAAe,GAAkB,IAAI,CAAC;AAE1C,SAAS,aAAa,CAAC,CAAS;IAI9B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAA0C,WAAW,CAAC,CAAC;QACzF,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,EAAoF,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,eAAe,GAAI,CAAW,CAAC,OAAO,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,UAAU,CAAC;IACT,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,mVAAmV;IACrV,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,sBAAsB,IAAI,qBAAqB,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;QAE5C,IAAI,KAAK,GAAuB,EAAE,CAAC;QACnC,IAAI,eAAe,GAAwB,IAAI,GAAG,EAAE,CAAC;QACrD,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,eAAe;gBAAE,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACvE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,SAAS,GAAI,CAAW,CAAC,OAAO,CAAC;QACnC,CAAC;QAED,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,cAAc,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,oEAAoE;QACpE,gEAAgE;QAChE,kBAAkB;QAClB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;YACpD,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC;gBAAE,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;YACvE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;gBAAE,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC3E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,GAAG,EAapB,CAAC;QAEJ,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,iDAAiD;QACjD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClC,oEAAoE;YACpE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,QAAQ,CAAC,CAAC;YAC1F,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,iEAAiE;YACjE,IAAI,YAAY,GAAkB,IAAI,CAAC;YACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;YACrD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,EAAE,EAAE,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,EAAE;yBACX,OAAO,CAAC,uDAAuD,CAAC;yBAChE,GAAG,CAAC,KAAK,CAAkD,CAAC;oBAC/D,IAAI,GAAG,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;wBACtC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;gBAC1C,CAAC;gBACD,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;gBACjB,KAAK;gBACL,QAAQ;gBACR,KAAK;gBACL,WAAW;gBACX,SAAS;gBACT,QAAQ;gBACR,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,KAAK,GAAa,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CACzD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5C,iEAAiE;gBACjE,IAAI,CAAC;oBACH,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,IAAI,WAAW,GAAkB,IAAI,CAAC;gBACtC,IAAI,cAAc,GAAkB,IAAI,CAAC;gBACzC,IAAI,YAAY,GAAkB,IAAI,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,EAAE;yBACX,OAAO,CAAC,4EAA4E,CAAC;yBACrF,GAAG,CAAC,KAAK,CAMC,CAAC;oBACd,IAAI,GAAG,EAAE,CAAC;wBACR,WAAW,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC;wBAChC,cAAc,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;wBAC1C,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;4BAAE,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;gBAC1C,CAAC;gBACD,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACzB,IAAI,YAAY,IAAI,IAAI;wBAAE,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;wBACjB,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,EAAE;wBACZ,KAAK;wBACL,WAAW,EAAE,cAAc,IAAI,EAAE;wBACjC,SAAS,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,IAAI,YAAY,KAAK,WAAW;wBAC1E,QAAQ,EAAE,IAAI;wBACd,YAAY;wBACZ,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,oBAAoB,CAAC;YACvE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI;aACd,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,CAAC,KAAK,IAAI,WAAW,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CACzO;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,MAAM,GACV,0FAA0F,CAAC;QAC7F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5D,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,qEAAqE;QACrE,qEAAqE;QACrE,gEAAgE;QAChE,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC;YAC7D,IAAI,OAAO,IAAI,oBAAoB,EAAE,CAAC;gBACpC,cAAc,GAAG,sBAAsB,OAAO,wEAAwE,CAAC;YACzH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC,4CAA4C,SAAS,iBAAiB,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iCAAiC,aAAa,aAAa,WAAW,GAAG,cAAc,EAAE;YAC/M,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,SAAS,gBAAgB,aAAa,oBAAoB,WAAW,GAAG,cAAc,EAAE,CAAC;QAC1J,gEAAgE;QAChE,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;SAC7B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/ping.d.ts

@@ -0,0 +1,3 @@
+import type { RegisteredTool } from "../tool-registry.js";
+export declare const pingTool: RegisteredTool;
+//# sourceMappingURL=ping.d.ts.map

package/dist/tools/ping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping.d.ts","sourceRoot":"","sources":["../../src/tools/ping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAiB1D,eAAO,MAAM,QAAQ,EAAE,cAOtB,CAAC"}

package/dist/tools/ping.js

@@ -0,0 +1,23 @@
+import { defineTool, z } from "./_define.js";
+defineTool({
+    name: "ping",
+    description: "health check — returns ok+ts",
+    inputSchema: z.object({}).strict(),
+    async execute() {
+        return {
+            summary: "ok",
+            markdown: "pong",
+            data: { ok: true, ts: Date.now() },
+        };
+    },
+});
+// Back-compat export for Phase 0 tests that import pingTool directly.
+export const pingTool = {
+    name: "ping",
+    schema: {
+        description: "health check",
+        inputSchema: { type: "object", properties: {} },
+    },
+    handler: async () => ({ ok: true, ts: Date.now() }),
+};
+//# sourceMappingURL=ping.js.map

package/dist/tools/ping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping.js","sourceRoot":"","sources":["../../src/tools/ping.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,UAAU,CAAC;IACT,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,8BAA8B;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAClC,KAAK,CAAC,OAAO;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;SACnC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE;QACN,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;KAChD;IACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;CACpD,CAAC"}

package/dist/tools/point_in_time_diff.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=point_in_time_diff.d.ts.map

package/dist/tools/point_in_time_diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"point_in_time_diff.d.ts","sourceRoot":"","sources":["../../src/tools/point_in_time_diff.ts"],"names":[],"mappings":""}

package/dist/tools/point_in_time_diff.js

@@ -0,0 +1,37 @@
+import { render } from "@ryanstark24/sfgraph-core";
+import { getToolContext } from "../context.js";
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({
+    org: z.string().min(1),
+    from: z.string().min(1),
+    to: z.union([z.string().min(1), z.literal("current")]).default("current"),
+});
+defineTool({
+    name: "point_in_time_diff",
+    description: "Diff org graph between two snapshots (or snapshot vs current).",
+    inputSchema,
+    async execute(input) {
+        const ctx = await getToolContext({ orgId: input.org });
+        const nodeDiff = ctx.snapshotStore.diffNodes(ctx.orgId, input.from, input.to);
+        const edgeDiff = ctx.snapshotStore.diffEdges(ctx.orgId, input.from, input.to);
+        const mermaid = render.renderDiff({
+            added: nodeDiff.added.map((n) => ({ qualifiedName: n.qualifiedName })),
+            removed: nodeDiff.removed.map((n) => ({ qualifiedName: n.qualifiedName })),
+            changed: nodeDiff.changed.map((c) => ({ qualifiedName: c.after.qualifiedName })),
+        });
+        const md = [
+            `**Nodes** — +${nodeDiff.added.length} / -${nodeDiff.removed.length} / ~${nodeDiff.changed.length}`,
+            `**Edges** — +${edgeDiff.added.length} / -${edgeDiff.removed.length}`,
+            "",
+            "```mermaid",
+            mermaid,
+            "```",
+        ].join("\n");
+        return {
+            summary: `diff: +${nodeDiff.added.length} ~${nodeDiff.changed.length} -${nodeDiff.removed.length}`,
+            markdown: md,
+            data: { nodeDiff, edgeDiff },
+        };
+    },
+});
+//# sourceMappingURL=point_in_time_diff.js.map

package/dist/tools/point_in_time_diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"point_in_time_diff.js","sourceRoot":"","sources":["../../src/tools/point_in_time_diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CAC1E,CAAC,CAAC;AAEH,UAAU,CAAC;IACT,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,gEAAgE;IAC7E,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,EAAE,GAAG;YACT,gBAAgB,QAAQ,CAAC,KAAK,CAAC,MAAM,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;YACnG,gBAAgB,QAAQ,CAAC,KAAK,CAAC,MAAM,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;YACrE,EAAE;YACF,YAAY;YACZ,OAAO;YACP,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO;YACL,OAAO,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;YAClG,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;SAC7B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/security_audit.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security_audit.d.ts.map

package/dist/tools/security_audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_audit.d.ts","sourceRoot":"","sources":["../../src/tools/security_audit.ts"],"names":[],"mappings":""}

package/dist/tools/security_audit.js

@@ -0,0 +1,56 @@
+import { analyze } from "@ryanstark24/sfgraph-core";
+import { getToolContext } from "../context.js";
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({
+    org: z.string().min(1),
+    /** Narrow the audit to a single SObject. Accepts `Account` or `CustomObject:Account`. */
+    object: z.string().min(1).optional(),
+    /** Narrow the audit to a single field. Accepts a full qname like `CustomField:Account.Tier__c`. */
+    field: z.string().min(1).optional(),
+});
+defineTool({
+    name: "security_audit",
+    description: "USE THIS for any 'FLS' / 'who has access to X' / 'security audit' / 'sharing rules' / 'permission audit' question about a Salesforce org. Returns full-access sharing rules, FLS gaps on PII-shaped fields, and the Profile/PermSet -> Object/Field access matrix. Optional `object` / `field` filters narrow the FLS-gap + access-matrix output to a single SObject or field.",
+    inputSchema,
+    async execute(input) {
+        const ctx = await getToolContext({ orgId: input.org });
+        const filter = {};
+        if (input.object !== undefined)
+            filter.object = input.object;
+        if (input.field !== undefined)
+            filter.field = input.field;
+        const audit = analyze.securityAudit(ctx.graphStore, ctx.orgId, filter);
+        // Augment with cached findings table if present
+        let cachedFindings = [];
+        if (ctx.db) {
+            try {
+                const d = ctx.db;
+                cachedFindings = d
+                    .prepare("SELECT qualified_name, rule_id, message FROM _sfgraph_findings WHERE org_id = ? ORDER BY rule_id")
+                    .all(ctx.orgId)
+                    .map((r) => ({ qname: r.qualified_name, rule: r.rule_id, message: r.message }));
+            }
+            catch {
+                /* table may not exist */
+            }
+        }
+        const md = [
+            `**Full-access sharing rules:** ${audit.sharingFullAccess.length}`,
+            ...audit.sharingFullAccess.slice(0, 20).map((q) => `- \`${q}\``),
+            "",
+            `**FLS gaps (fields with no permission-set grant):** ${audit.flsGaps.length}`,
+            ...audit.flsGaps.slice(0, 20).map((q) => `- \`${q}\``),
+        ].join("\n");
+        const truncationNote = audit.truncated
+            ? ` — results capped at ${analyze.SECURITY_PER_LABEL_CAP}/label; narrow with object/field`
+            : "";
+        return {
+            summary: `${audit.flsGaps.length} FLS gaps, ${audit.sharingFullAccess.length} full-access rules${truncationNote}`,
+            markdown: audit.truncated
+                ? `${md}\n\n> _Note: at least one label hit the ${analyze.SECURITY_PER_LABEL_CAP}-row cap. Results are incomplete — pass \`object\` or \`field\` to narrow._`
+                : md,
+            data: { ...audit, cachedFindings, truncated: audit.truncated ?? false },
+        };
+    },
+});
+//# sourceMappingURL=security_audit.js.map

package/dist/tools/security_audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_audit.js","sourceRoot":"","sources":["../../src/tools/security_audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,yFAAyF;IACzF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,mGAAmG;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,UAAU,CAAC;IACT,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,gXAAgX;IAClX,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAwC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvE,gDAAgD;QAChD,IAAI,cAAc,GAA4D,EAAE,CAAC;QACjF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,GAAG,CAAC,EAMb,CAAC;gBACF,cAAc,GAAG,CAAC;qBACf,OAAO,CACN,kGAAkG,CACnG;qBACA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;qBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG;YACT,kCAAkC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAClE,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAChE,EAAE;YACF,uDAAuD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE;YAC7E,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS;YACpC,CAAC,CAAC,wBAAwB,OAAO,CAAC,sBAAsB,kCAAkC;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,cAAc,KAAK,CAAC,iBAAiB,CAAC,MAAM,qBAAqB,cAAc,EAAE;YACjH,QAAQ,EAAE,KAAK,CAAC,SAAS;gBACvB,CAAC,CAAC,GAAG,EAAE,2CAA2C,OAAO,CAAC,sBAAsB,6EAA6E;gBAC7J,CAAC,CAAC,EAAE;YACN,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,EAAE;SACxE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/snapshot_create.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=snapshot_create.d.ts.map

package/dist/tools/snapshot_create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot_create.d.ts","sourceRoot":"","sources":["../../src/tools/snapshot_create.ts"],"names":[],"mappings":""}

package/dist/tools/snapshot_create.js

@@ -0,0 +1,24 @@
+import { getToolContext } from "../context.js";
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({
+    org: z.string().min(1),
+    name: z.string().optional(),
+    kind: z.enum(["manual", "scheduled"]).default("manual"),
+});
+defineTool({
+    name: "snapshot_create",
+    description: "Create a graph snapshot for an org.",
+    inputSchema,
+    async execute(input) {
+        const ctx = await getToolContext({ orgId: input.org });
+        const label = input.name ?? `${input.kind}-${new Date().toISOString()}`;
+        const snap = ctx.snapshotStore.createSnapshot(ctx.orgId, label, false);
+        return {
+            summary: `snapshot ${snap.id} created`,
+            markdown: `Snapshot \`${snap.id}\` (\"${label}\") created for org \`${ctx.orgId}\`.`,
+            data: snap,
+            follow_up_tools: ["snapshot_list", "point_in_time_diff"],
+        };
+    },
+});
+//# sourceMappingURL=snapshot_create.js.map

package/dist/tools/snapshot_create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot_create.js","sourceRoot":"","sources":["../../src/tools/snapshot_create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACxD,CAAC,CAAC;AAEH,UAAU,CAAC;IACT,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,qCAAqC;IAClD,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,YAAY,IAAI,CAAC,EAAE,UAAU;YACtC,QAAQ,EAAE,cAAc,IAAI,CAAC,EAAE,SAAS,KAAK,yBAAyB,GAAG,CAAC,KAAK,KAAK;YACpF,IAAI,EAAE,IAAI;YACV,eAAe,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;SACzD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/snapshot_list.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=snapshot_list.d.ts.map

package/dist/tools/snapshot_list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot_list.d.ts","sourceRoot":"","sources":["../../src/tools/snapshot_list.ts"],"names":[],"mappings":""}

package/dist/tools/snapshot_list.js

@@ -0,0 +1,22 @@
+import { getToolContext } from "../context.js";
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({ org: z.string().min(1) });
+defineTool({
+    name: "snapshot_list",
+    description: "List up to 20 most recent snapshots for an org.",
+    inputSchema,
+    async execute(input) {
+        const ctx = await getToolContext({ orgId: input.org });
+        const snaps = ctx.snapshotStore.listSnapshots(ctx.orgId).slice(0, 20);
+        const rows = snaps
+            .map((s) => `| \`${s.id}\` | ${s.label} | ${new Date(s.createdAt).toISOString()} | ${s.isAuto ? "auto" : "manual"} |`)
+            .join("\n");
+        const md = `| id | label | createdAt | kind |\n|---|---|---|---|\n${rows}`;
+        return {
+            summary: `${snaps.length} snapshots`,
+            markdown: snaps.length === 0 ? "_no snapshots_" : md,
+            data: snaps,
+        };
+    },
+});
+//# sourceMappingURL=snapshot_list.js.map

package/dist/tools/snapshot_list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot_list.js","sourceRoot":"","sources":["../../src/tools/snapshot_list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEzD,UAAU,CAAC;IACT,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,iDAAiD;IAC9D,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,KAAK;aACf,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,CAC5G;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,EAAE,GAAG,yDAAyD,IAAI,EAAE,CAAC;QAC3E,OAAO;YACL,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,YAAY;YACpC,QAAQ,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;YACpD,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/staleness_check.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=staleness_check.d.ts.map

package/dist/tools/staleness_check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staleness_check.d.ts","sourceRoot":"","sources":["../../src/tools/staleness_check.ts"],"names":[],"mappings":""}

package/dist/tools/staleness_check.js

@@ -0,0 +1,50 @@
+import { getToolContext } from "../context.js";
+import { defineTool, z } from "./_define.js";
+const inputSchema = z.object({ org: z.string().min(1) });
+const DAY_MS = 1000 * 60 * 60 * 24;
+const STALE_THRESHOLD_DAYS = 7;
+defineTool({
+    name: "staleness_check",
+    description: "USE THIS for any 'is my graph fresh' / 'when was the last ingest' / 'should I re-ingest' question for a single Salesforce org. Returns days since last sync + stale flag (>=7 days) + the exact sfgraph ingest command to refresh. Call this FIRST in any workflow where staleness would change the answer.",
+    inputSchema,
+    async execute(input) {
+        const ctx = await getToolContext({ orgId: input.org });
+        let lastSyncedAt = null;
+        try {
+            const db = ctx.graphStore.db;
+            const row = db
+                .prepare("SELECT last_synced_at FROM _sfgraph_orgs WHERE id = ?")
+                .get(ctx.orgId);
+            if (row && row.last_synced_at != null) {
+                lastSyncedAt = Number(row.last_synced_at);
+            }
+        }
+        catch {
+            // table missing or no row — treat as never synced
+        }
+        const now = Date.now();
+        const ageDays = lastSyncedAt != null ? Math.floor((now - lastSyncedAt) / DAY_MS) : null;
+        const stale = ageDays == null || ageDays >= STALE_THRESHOLD_DAYS;
+        const recommendation = stale
+            ? `ingest is ${ageDays == null ? "missing" : `${ageDays} days old`} — run \`sfgraph ingest --org ${input.org}\` to refresh before relying on this analysis`
+            : `ingest is ${ageDays} day${ageDays === 1 ? "" : "s"} old — fresh enough to use`;
+        const summary = stale ? `STALE: ${recommendation}` : `fresh: ${recommendation}`;
+        const md = [
+            "| org | last synced | age (days) | stale | recommendation |",
+            "|---|---|---|---|---|",
+            `| \`${input.org}\` | ${lastSyncedAt != null ? new Date(lastSyncedAt).toISOString() : "_never_"} | ${ageDays ?? "-"} | ${stale ? "yes" : "no"} | ${recommendation} |`,
+        ].join("\n");
+        return {
+            summary,
+            markdown: md,
+            data: {
+                org: input.org,
+                lastSyncedAt,
+                ageDays,
+                stale,
+                recommendation,
+            },
+        };
+    },
+});
+//# sourceMappingURL=staleness_check.js.map

package/dist/tools/staleness_check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staleness_check.js","sourceRoot":"","sources":["../../src/tools/staleness_check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACnC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,UAAU,CAAC;IACT,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,6SAA6S;IAC/S,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,GACN,GAAG,CAAC,UAGL,CAAC,EAAE,CAAC;YACL,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CAAC,uDAAuD,CAAC;iBAChE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAkD,CAAC;YACnE,IAAI,GAAG,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;gBACtC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,oBAAoB,CAAC;QACjE,MAAM,cAAc,GAAG,KAAK;YAC1B,CAAC,CAAC,aAAa,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,WAAW,iCAAiC,KAAK,CAAC,GAAG,+CAA+C;YAC3J,CAAC,CAAC,aAAa,OAAO,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,4BAA4B,CAAC;QACpF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,cAAc,EAAE,CAAC,CAAC,CAAC,UAAU,cAAc,EAAE,CAAC;QAChF,MAAM,EAAE,GAAG;YACT,6DAA6D;YAC7D,uBAAuB;YACvB,OAAO,KAAK,CAAC,GAAG,QAAQ,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,MAAM,OAAO,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,cAAc,IAAI;SACtK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE;gBACJ,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,YAAY;gBACZ,OAAO;gBACP,KAAK;gBACL,cAAc;aACf;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/start_ingest_job.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=start_ingest_job.d.ts.map

package/dist/tools/start_ingest_job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start_ingest_job.d.ts","sourceRoot":"","sources":["../../src/tools/start_ingest_job.ts"],"names":[],"mappings":""}