@salesforce/graphiti 10.15.1 → 10.16.0

package/dist/schemas/input-schemas.js

@@ -0,0 +1,230 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+/**
+ * Per-tool Zod input schemas, extracted so the MCP server and the CLI mirror
+ * (`src/commands/mcp-mirror/`) validate identical argument shapes. The MCP
+ * tools consume `<TOOL>_INPUT.shape` (raw-shape registration) or the object
+ * directly (`detail`, which is `.strict()`); the CLI adapters call
+ * `<TOOL>_INPUT.parse()` on the incoming JSON. Single source of truth keeps
+ * the two transports arg-for-arg symmetric.
+ *
+ * Descriptions and validation are preserved verbatim from the original inline
+ * schemas; behavior is unchanged — this is a pure extraction.
+ */
+import { z } from "zod";
+import { childRelationshipSchema, graphqlName, orderByObject, orgAlias } from "./fields.js";
+import { GROUP_BY_FUNCTIONS } from "../intent/types.js";
+// --- sf_gql_list ------------------------------------------------------------
+// `sf_gql_list` advertises both shapes (singleton + array) for backward
+// compatibility with early MCP clients that learned the array form.
+const listOrderBySchema = z.union([orderByObject, z.array(orderByObject)]);
+export const LIST_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Case". Must be a valid GraphQL Name.'),
+    fields: z
+        .array(z.string())
+        .describe('Scalar field API names to select on the node. Dot-paths like "Owner.Name" are allowed.'),
+    parentFields: z
+        .array(z.string())
+        .optional()
+        .describe('Dotted parent-relationship paths, e.g. "Account.Name".'),
+    childRelationships: z.array(childRelationshipSchema(listOrderBySchema)).optional(),
+    filter: z
+        .record(z.unknown())
+        .optional()
+        .describe("<Object>_Filter shape. String leaves matching $varName promote to typed query variables."),
+    orderBy: listOrderBySchema
+        .optional()
+        .describe("<Object>_OrderBy. Singleton object preferred; arrays are collapsed to the first entry."),
+    first: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("Top-level connection page size; defaults to 10."),
+    scope: z.string().optional().describe('Scope enum (e.g. "MINE", "EVERYTHING") or $varName.'),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to <Object>List.").optional(),
+});
+// --- sf_gql_detail ----------------------------------------------------------
+// Advertised schema per FR-6.3 is the singleton object form; we still accept
+// arrays at runtime via `z.preprocess` (FR-6.2 compat shim for early MCP
+// clients that learned the array shape). The transform collapses to the first
+// element before validation, so downstream code sees a singleton.
+const detailOrderBySchema = z.preprocess((v) => (Array.isArray(v) ? v[0] : v), orderByObject);
+// Note: filter/orderBy/scope/first are intentionally absent at the top level —
+// `sf_gql_detail` is single-record-by-Id (FR-5.5). Filtering happens via the
+// declared `$<idVariable>: ID!`; pagination doesn't apply.
+//
+// `.strict()` rejects unknown top-level keys at the MCP boundary so an LLM
+// hallucinating sibling-tool params (`filter`, `scope`, `first`) gets a
+// validation error to learn from rather than silent omission.
+export const DETAIL_INPUT = z
+    .object({
+    org: orgAlias("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Case". Must be a valid GraphQL Name.'),
+    fields: z
+        .array(z.string())
+        .describe('Scalar field API names to select on the node. Dot-paths like "Owner.Name" are allowed.'),
+    parentFields: z
+        .array(z.string())
+        .optional()
+        .describe('Dotted parent-relationship paths, e.g. "Account.Name".'),
+    childRelationships: z.array(childRelationshipSchema(detailOrderBySchema)).optional(),
+    idVariable: graphqlName('Name (without leading "$") for the ID variable. Defaults to "id". Declared as <name>: ID! and bound via where { Id: { eq: $<name> } } per FR-5.5. Choose a name that does not appear as a $varName in any childRelationships filter/orderBy — collisions are rejected.').optional(),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to <Object>Detail.").optional(),
+})
+    .strict();
+// --- sf_gql_discover --------------------------------------------------------
+// Org/object/field flow into shell commands (sf CLI), filesystem paths
+// (ObjectInfo cache), and GraphQL operation names. Bound at the MCP boundary
+// to safe API-name charsets so downstream layers can trust them.
+const DISCOVER_ORG_ALIAS_RE = /^[A-Za-z0-9_-]{1,80}$/;
+const DISCOVER_SOBJECT_NAME_RE = /^[A-Za-z][A-Za-z0-9_]{0,79}$/;
+// eslint-disable-next-line no-control-regex -- intentionally rejects control chars
+const DISCOVER_SEARCH_RE = /^[^\x00-\x1f\x7f]*$/;
+export const DISCOVER_INPUT = z.object({
+    org: z
+        .string()
+        .regex(DISCOVER_ORG_ALIAS_RE, "org must match /^[A-Za-z0-9_-]{1,80}$/")
+        .describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    mode: z
+        .enum(["list_objects", "describe_object", "describe_field"])
+        .describe('Discovery mode. "list_objects" enumerates queryable SObjects; "describe_object" and "describe_field" return ObjectInfo metadata.'),
+    object: z
+        .string()
+        .regex(DISCOVER_SOBJECT_NAME_RE, "object must match /^[A-Za-z][A-Za-z0-9_]{0,79}$/")
+        .optional()
+        .describe('SObject API name. Required for "describe_object" and "describe_field".'),
+    field: z
+        .string()
+        .regex(DISCOVER_SOBJECT_NAME_RE, "field must match /^[A-Za-z][A-Za-z0-9_]{0,79}$/")
+        .optional()
+        .describe('Field API name. Required for "describe_field".'),
+    search: z
+        .string()
+        .max(100, "search must be 100 characters or fewer")
+        .regex(DISCOVER_SEARCH_RE, "search must not contain control characters")
+        .optional()
+        .describe('Optional substring filter applied to "list_objects" results.'),
+});
+// --- sf_gql_aggregate -------------------------------------------------------
+const aliasField = z
+    .string()
+    .optional()
+    .describe("GraphQL alias for this aggregation's result key.");
+const aggregationSchema = z.discriminatedUnion("function", [
+    z.object({
+        function: z.enum(["count", "countDistinct"]),
+        field: z.string().optional().describe('SObject field API name. Defaults to "Id" when omitted.'),
+        alias: aliasField,
+    }),
+    z.object({
+        function: z.enum(["sum", "avg", "min", "max"]),
+        field: z.string().describe("SObject field API name. Required for sum/avg/min/max."),
+        alias: aliasField,
+    }),
+]);
+const groupByElementSchema = z.union([
+    z.string(),
+    z.object({
+        field: z.string().describe("SObject field API name (DateTime/Date field)."),
+        function: z
+            .enum(GROUP_BY_FUNCTIONS)
+            .describe("Date bucketing function from UIAPI GroupByFunction enum."),
+    }),
+]);
+export const AGGREGATE_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Order". Must be a valid GraphQL Name.'),
+    groupBy: z
+        .array(groupByElementSchema)
+        .optional()
+        .describe("GroupBy elements. Each is either a plain field name string (renders as `{Field: {group: true}}`) or an object `{field, function}` for date-bucketed groupBy (renders as `{Field: {function: CALENDAR_MONTH}}`). Omit or pass `[]` for un-grouped aggregation; with no aggregations either, defaults to `count` over `Id` (FR-8.2)."),
+    aggregations: z
+        .array(aggregationSchema)
+        .optional()
+        .describe("List of aggregation functions to compute. Each entry projects under its alias (or default `<function><PascalCaseField>`)."),
+    filter: z
+        .record(z.unknown())
+        .optional()
+        .describe("<Object>_Filter applied to every aggregation. String leaves matching $varName promote to typed query variables."),
+    orderBy: z
+        .union([z.record(z.unknown()), z.array(z.record(z.unknown()))])
+        .optional()
+        .describe("<Object>_OrderBy. Singleton object preferred; arrays are collapsed to the first entry. String leaves matching $varName promote to typed query variables."),
+    first: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("Connection page size (top-N pattern). No default — omit for all buckets."),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to <Object>Aggregate.").optional(),
+});
+// --- sf_gql_raw -------------------------------------------------------------
+export const RAW_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    commands: z
+        .array(z.string())
+        .min(1)
+        .describe("CLI-style commands applied in order to a transient session. Supported verbs:\n" +
+        "  select <path[:alias]>      e.g. select uiapi/query/Case/edges/node/Subject/value\n" +
+        "  set [<path>] <key>=<value> e.g. set uiapi/query/Case first=10  |  set uiapi/query/Case where.Status=New\n" +
+        "  var $name <path> [default] e.g. var $id uiapi/query/Case/@args/where/Id/eq (type inferred from path)\n" +
+        'Each command is tokenized on spaces and a value MUST NOT contain a space — quoting does not help once a token has started (key=\'a b\' still splits). A filter value that contains a space (e.g. "New York", "In Progress") cannot be expressed via set in v1; use sf_gql_list with a JSON filter, or pass the value through a variable bound with var.\n' +
+        "Fails fast: a bad command aborts the whole call. Other CLI verbs (cd, drop, alias, optional, unset) are NOT supported in v1."),
+    operation: z
+        .enum(["query", "mutation", "aggregate"])
+        .optional()
+        .describe('Operation root. "query" (default) → uiapi.query; "mutation" → mutation root; "aggregate" → uiapi.aggregate.'),
+    typeName: graphqlName("Override the GraphQL operation name. Defaults to Raw<Operation>.").optional(),
+});
+// --- sf_gql_create ----------------------------------------------------------
+export const CREATE_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Order". Must be a valid GraphQL Name.'),
+    returnFields: z
+        .array(z.string())
+        .optional()
+        .describe('Scalar field API names to read back on the created Record. Defaults to ["Id"]. Dot-paths like Owner.Name are not supported in mutation results; passing them produces a warning and the field is skipped.'),
+    inputVariable: z
+        .string()
+        .optional()
+        .describe('Variable name (without "$") for the create input. Defaults to "input". Declared as $<name>: <Object>CreateInput!.'),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to Create<Object>.").optional(),
+});
+// --- sf_gql_update ----------------------------------------------------------
+export const UPDATE_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Order". Must be a valid GraphQL Name.'),
+    returnFields: z
+        .array(z.string())
+        .optional()
+        .describe('Scalar field API names to read back on the updated Record. Defaults to ["Id"]. Dot-paths like Owner.Name are not supported in mutation results; passing them produces a warning and the field is skipped.'),
+    inputVariable: z
+        .string()
+        .optional()
+        .describe('Variable name (without "$") for the update input. Defaults to "input". Declared as $<name>: <Object>UpdateInput!.'),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to Update<Object>.").optional(),
+});
+// --- sf_gql_delete ----------------------------------------------------------
+export const DELETE_INPUT = z.object({
+    org: z.string().describe("Org alias resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    object: graphqlName('SObject API name, e.g. "Account", "Order". Must be a valid GraphQL Name.'),
+    inputVariable: z
+        .string()
+        .optional()
+        .describe('Variable name (without "$") for the delete input. Defaults to "input". Declared as $<name>: RecordDeleteInput! — the schema-wide delete input carrying the record Id, not an <Object>-specific type.'),
+    operationName: graphqlName("Override the GraphQL operation name. Defaults to Delete<Object>.").optional(),
+});
+// --- sf_gql_connect ---------------------------------------------------------
+export const CONNECT_INPUT = z.object({
+    org: orgAlias("Org alias or username resolved via local Salesforce CLI auth (~/.sf, ~/.sfdx)."),
+    forceRefresh: z
+        .boolean()
+        .optional()
+        .describe("Re-download the schema even if it is already cached, clearing the on-disk introspection JSON, the in-memory parsed schema, and the ObjectInfo cache. Use after deploying new metadata (fields, picklist values, objects) so subsequent tools see the changes. Defaults to false."),
+});
+//# sourceMappingURL=input-schemas.js.map

package/dist/schemas/input-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schemas.js","sourceRoot":"","sources":["../../src/schemas/input-schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,+EAA+E;AAE/E,wEAAwE;AACxE,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,MAAM,EAAE,WAAW,CAAC,yEAAyE,CAAC;IAC9F,MAAM,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACR,wFAAwF,CACxF;IACF,YAAY,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC;IACpE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClF,MAAM,EAAE,CAAC;SACP,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnB,QAAQ,EAAE;SACV,QAAQ,CACR,0FAA0F,CAC1F;IACF,OAAO,EAAE,iBAAiB;SACxB,QAAQ,EAAE;SACV,QAAQ,CACR,wFAAwF,CACxF;IACF,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC5F,aAAa,EAAE,WAAW,CACzB,gEAAgE,CAChE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AAE9F,+EAA+E;AAC/E,6EAA6E;AAC7E,2DAA2D;AAC3D,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC3B,MAAM,CAAC;IACP,GAAG,EAAE,QAAQ,CAAC,oEAAoE,CAAC;IACnF,MAAM,EAAE,WAAW,CAAC,yEAAyE,CAAC;IAC9F,MAAM,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACR,wFAAwF,CACxF;IACF,YAAY,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC;IACpE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpF,UAAU,EAAE,WAAW,CACtB,wQAAwQ,CACxQ,CAAC,QAAQ,EAAE;IACZ,aAAa,EAAE,WAAW,CACzB,kEAAkE,CAClE,CAAC,QAAQ,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,+EAA+E;AAE/E,uEAAuE;AACvE,6EAA6E;AAC7E,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AAChE,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CAAC,qBAAqB,EAAE,wCAAwC,CAAC;SACtE,QAAQ,CAAC,oEAAoE,CAAC;IAChF,IAAI,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;SAC3D,QAAQ,CACR,kIAAkI,CAClI;IACF,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,EAAE,kDAAkD,CAAC;SACnF,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACpF,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,EAAE,iDAAiD,CAAC;SAClF,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC5D,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,EAAE,wCAAwC,CAAC;SAClD,KAAK,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;SACvE,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;CAC1E,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,QAAQ,CAAC,kDAAkD,CAAC,CAAC;AAE/D,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IAC1D,CAAC,CAAC,MAAM,CAAC;QACR,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QAC/F,KAAK,EAAE,UAAU;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACnF,KAAK,EAAE,UAAU;KACjB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,CAAC;QACR,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC3E,QAAQ,EAAE,CAAC;aACT,IAAI,CAAC,kBAAkB,CAAC;aACxB,QAAQ,CAAC,0DAA0D,CAAC;KACtE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,MAAM,EAAE,WAAW,CAAC,0EAA0E,CAAC;IAC/F,OAAO,EAAE,CAAC;SACR,KAAK,CAAC,oBAAoB,CAAC;SAC3B,QAAQ,EAAE;SACV,QAAQ,CACR,oUAAoU,CACpU;IACF,YAAY,EAAE,CAAC;SACb,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,EAAE;SACV,QAAQ,CACR,2HAA2H,CAC3H;IACF,MAAM,EAAE,CAAC;SACP,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnB,QAAQ,EAAE;SACV,QAAQ,CACR,iHAAiH,CACjH;IACF,OAAO,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;SAC9D,QAAQ,EAAE;SACV,QAAQ,CACR,0JAA0J,CAC1J;IACF,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,0EAA0E,CAAC;IACtF,aAAa,EAAE,WAAW,CACzB,qEAAqE,CACrE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,QAAQ,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,gFAAgF;QAC/E,sFAAsF;QACtF,6GAA6G;QAC7G,0GAA0G;QAC1G,2VAA2V;QAC3V,8HAA8H,CAC/H;IACF,SAAS,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACxC,QAAQ,EAAE;SACV,QAAQ,CACR,6GAA6G,CAC7G;IACF,QAAQ,EAAE,WAAW,CACpB,kEAAkE,CAClE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,MAAM,EAAE,WAAW,CAAC,0EAA0E,CAAC;IAC/F,YAAY,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACR,2MAA2M,CAC3M;IACF,aAAa,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACR,mHAAmH,CACnH;IACF,aAAa,EAAE,WAAW,CACzB,kEAAkE,CAClE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,MAAM,EAAE,WAAW,CAAC,0EAA0E,CAAC;IAC/F,YAAY,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACR,2MAA2M,CAC3M;IACF,aAAa,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACR,mHAAmH,CACnH;IACF,aAAa,EAAE,WAAW,CACzB,kEAAkE,CAClE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F,MAAM,EAAE,WAAW,CAAC,0EAA0E,CAAC;IAC/F,aAAa,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACR,sMAAsM,CACtM;IACF,aAAa,EAAE,WAAW,CACzB,kEAAkE,CAClE,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,QAAQ,CAAC,gFAAgF,CAAC;IAC/F,YAAY,EAAE,CAAC;SACb,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACR,kRAAkR,CAClR;CACF,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/graphiti",
-  "version": "10.15.1",
+  "version": "10.16.0",
   "description": "Progressive GraphQL query builder CLI for Salesforce orgs",
   "license": "SEE LICENSE IN LICENSE.txt",
   "type": "module",

package/src/cli.ts

@@ -12,6 +12,7 @@ import { fileURLToPath } from "url";
 import { Command } from "commander";
 import { connectCommand } from "./commands/connect.js";
 import { describeCommand } from "./commands/describe.js";
+import { MIRRORS } from "./commands/mcp-mirror/commands.js";
 import {
 	queryNew,
 	queryHelp,
@@ -761,4 +762,25 @@ program
 		}
 	});
 
-program.parse();
+// ── MCP-mirror commands ──────────────────────────────────────────────────────
+//
+// One top-level subcommand per MCP tool, generated from the shared MIRRORS
+// table. Each takes a JSON blob (positional or stdin) and emits one JSON line on
+// stdout — the same args/output the matching `sf_gql_*` MCP tool produces, over
+// a different transport. Errors are emitted as a JSON envelope by `runMirror`,
+// which sets `process.exitCode = 1` itself, so the actions just await (no
+// try/catch, no `process.exit` that would truncate the buffered stdout write).
+
+for (const mirror of MIRRORS) {
+	program
+		.command(mirror.name)
+		.description(`Mirror of the ${mirror.name.replace(/-/g, "_")} MCP tool. ${mirror.summary}`)
+		.argument("[json]", "JSON args; reads stdin when omitted")
+		.action(async (json?: string) => {
+			await mirror.run(json);
+		});
+}
+
+// `parseAsync` (not `parse`) so the async mirror actions are awaited before the
+// process settles — otherwise their stdout write could race the event-loop exit.
+await program.parseAsync();

package/src/commands/mcp-mirror/__tests__/commands.spec.ts

@@ -0,0 +1,146 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+/* eslint-disable import/order -- the adapter imports must follow the vi.mock()
+   block so the intent builders are mocked before the adapters that import them
+   are loaded; import/order can't model that hoisting constraint. */
+
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { captureStdout } from "../../../__tests__/helpers/stdout.js";
+
+// Mock every intent builder so the adapters can be exercised without auth,
+// network, or a primed schema cache. Each returns a sentinel tagged with the
+// builder name so we can assert the adapter dispatched to the right one.
+vi.mock("../../../intent/build-list.js", () => ({
+	buildList: vi.fn(async (spec) => ({ from: "list", spec })),
+}));
+vi.mock("../../../intent/build-detail.js", () => ({
+	buildDetail: vi.fn(async (spec) => ({ from: "detail", spec })),
+}));
+vi.mock("../../../intent/build-discover.js", () => ({
+	buildDiscover: vi.fn(async (spec) => ({ from: "discover", spec })),
+}));
+vi.mock("../../../intent/build-aggregate.js", () => ({
+	buildAggregate: vi.fn(async (spec) => ({ from: "aggregate", spec })),
+}));
+vi.mock("../../../intent/build-raw.js", () => ({
+	buildRaw: vi.fn(async (spec) => ({ from: "raw", spec })),
+}));
+vi.mock("../../../intent/build-create.js", () => ({
+	buildCreate: vi.fn(async (spec) => ({ from: "create", spec })),
+}));
+vi.mock("../../../intent/build-update.js", () => ({
+	buildUpdate: vi.fn(async (spec) => ({ from: "update", spec })),
+}));
+vi.mock("../../../intent/build-delete.js", () => ({
+	buildDelete: vi.fn(async (spec) => ({ from: "delete", spec })),
+}));
+vi.mock("../../../intent/build-connect.js", () => ({
+	buildConnect: vi.fn(async (spec) => ({ from: "connect", spec })),
+}));
+
+import { MIRRORS } from "../commands.js";
+
+interface Case {
+	name: string;
+	run: (json?: string) => Promise<void>;
+	validJson: string;
+	expectedFrom: string;
+}
+
+// Per-tool fixtures: a representative valid payload and the sentinel `from` tag
+// its mocked builder returns (the mock tags by short name, e.g. "list").
+const FIXTURES: Record<string, { validJson: string; expectedFrom: string }> = {
+	"sf-gql-list": {
+		validJson: '{"org":"o","object":"Account","fields":["Id"]}',
+		expectedFrom: "list",
+	},
+	"sf-gql-detail": {
+		validJson: '{"org":"o","object":"Account","fields":["Id"]}',
+		expectedFrom: "detail",
+	},
+	"sf-gql-discover": { validJson: '{"org":"o","mode":"list_objects"}', expectedFrom: "discover" },
+	"sf-gql-aggregate": {
+		validJson: '{"org":"o","object":"Case","groupBy":["Status"]}',
+		expectedFrom: "aggregate",
+	},
+	"sf-gql-raw": {
+		validJson: '{"org":"o","commands":["select uiapi/query/Case/edges/node/Id/value"]}',
+		expectedFrom: "raw",
+	},
+	"sf-gql-create": { validJson: '{"org":"o","object":"Account"}', expectedFrom: "create" },
+	"sf-gql-update": { validJson: '{"org":"o","object":"Account"}', expectedFrom: "update" },
+	"sf-gql-delete": { validJson: '{"org":"o","object":"Account"}', expectedFrom: "delete" },
+	"sf-gql-connect": { validJson: '{"org":"o"}', expectedFrom: "connect" },
+};
+
+// Drive the suite off MIRRORS so a new tool is covered automatically once it has
+// a fixture; a missing fixture fails loudly rather than silently skipping.
+const CASES: Case[] = MIRRORS.map((m) => {
+	const fixture = FIXTURES[m.name];
+	if (!fixture) throw new Error(`No test fixture for mirror command "${m.name}"`);
+	return { name: m.name, run: m.run, ...fixture };
+});
+
+// `sf-gql-detail`'s adapter, looked up from the table for the .strict() test.
+const sfGqlDetail = MIRRORS.find((m) => m.name === "sf-gql-detail")!.run;
+
+beforeEach(() => {
+	process.exitCode = 0;
+});
+
+describe("mcp-mirror command adapters", () => {
+	it.each(CASES)(
+		"$name dispatches to its builder and prints the result as JSON",
+		async ({ run, validJson, expectedFrom }) => {
+			const out = await captureStdout(() => run(validJson));
+
+			const parsed = JSON.parse(out);
+			expect(parsed.from).toBe(expectedFrom);
+			// The adapter must hand the builder the *validated* input, not the raw
+			// string or a fixed object. The mocks echo `spec`, so this catches a
+			// payload-handoff regression (e.g. passing raw json instead of
+			// result.data) that the `from` tag alone would miss.
+			expect(parsed.spec).toEqual(JSON.parse(validJson));
+			expect(process.exitCode).toBe(0);
+		},
+	);
+
+	it.each(CASES)("$name emits INVALID_ARGS on a bad arg", async ({ run }) => {
+		const out = await captureStdout(() => run("{not json"));
+
+		expect(JSON.parse(out).error.code).toBe("INVALID_ARGS");
+		expect(process.exitCode).toBe(1);
+	});
+
+	it.each(CASES)(
+		"$name emits INVALID_ARGS on a well-formed object that fails schema validation",
+		async ({ run }) => {
+			// A valid JSON object missing required fields must route through the
+			// Zod-failure branch (not just the JSON.parse branch). `{}` is missing
+			// `org` for every tool.
+			const out = await captureStdout(() => run("{}"));
+
+			const parsed = JSON.parse(out);
+			expect(parsed.error.code).toBe("INVALID_ARGS");
+			expect(parsed.error.details).toBeTruthy();
+			expect(process.exitCode).toBe(1);
+		},
+	);
+
+	it("sf-gql-detail preserves DETAIL_INPUT's .strict() rejection of unknown top-level keys", async () => {
+		// DETAIL_INPUT is the one schema using .strict() (vs the .shape tools).
+		// `filter` is a sibling-tool param that detail intentionally rejects, so a
+		// hallucinating caller gets INVALID_ARGS rather than silent omission. This
+		// guards that the strict behavior survives the CLI adapter.
+		const out = await captureStdout(() =>
+			sfGqlDetail('{"org":"o","object":"Account","fields":["Id"],"filter":{}}'),
+		);
+
+		const parsed = JSON.parse(out);
+		expect(parsed.error.code).toBe("INVALID_ARGS");
+		expect(process.exitCode).toBe(1);
+	});
+});