salesforce-metadata-mcp 2.5.4 → 2.5.5

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [2.5.5] - 2026-06-03
+
+### Auth & Quality — Token Refresh + Code Analyzer Fixes
+
+#### Auth improvement
+- **`getFreshTokenFromCLI`**: switched from `sf org display` (which redacts the access token since Salesforce CLI v2.50) to `sf org auth show-access-token`, restoring `SF_ALIAS`-based authentication
+
+#### Code quality
+- **Salesforce Code Analyzer v5**: fixed all 544 violations across `src/` — no unused variables, all `let` → `const`, no `@typescript-eslint/no-explicit-any` warnings where the dynamic type was intentional, bias-neutral terminology throughout
+- **TypeScript strict mode**: zero compiler errors; `@ts-nocheck` removed from all source files
+
+Tool count: **132** (unchanged)
+
+---
+
 ## [2.5.4] - 2026-06-03
 
 ### TypeScript Source Sync — Proper Typing for All 132 Tools

package/README.md

@@ -1,6 +1,6 @@
 # salesforce-metadata-mcp
 
-[![Version](https://img.shields.io/badge/version-2.5.4-blue.svg)](https://npmjs.com/package/salesforce-metadata-mcp)
+[![Version](https://img.shields.io/badge/version-2.5.5-blue.svg)](https://npmjs.com/package/salesforce-metadata-mcp)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![MCP Compatible](https://img.shields.io/badge/MCP-Compatible-green.svg)](https://modelcontextprotocol.io)
 

package/dist/index.js

@@ -6,14 +6,14 @@ import { createServer } from "http";
 import { registerTools } from "./tools/index.js";
 const server = new McpServer({
     name: "salesforce-metadata-mcp",
-    version: "2.5.4",
+    version: "2.5.5",
 });
 registerTools(server);
 // ─── Transport: stdio ─────────────────────────────────────────────────────────
 async function runStdio() {
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    console.error("Salesforce Metadata MCP server v2.5.4 running on stdio");
+    console.error("Salesforce Metadata MCP server v2.5.5 running on stdio");
 }
 // ─── Transport: HTTP ──────────────────────────────────────────────────────────
 function readBody(req) {
@@ -38,7 +38,7 @@ async function runHTTP() {
         const url = req.url ?? "/";
         if (url === "/health" && req.method === "GET") {
             res.writeHead(200, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ status: "ok", server: "salesforce-metadata-mcp", version: "2.5.4" }));
+            res.end(JSON.stringify({ status: "ok", server: "salesforce-metadata-mcp", version: "2.5.5" }));
             return;
         }
         if (url === "/mcp" && req.method === "POST") {
@@ -64,7 +64,7 @@ async function runHTTP() {
         res.end(JSON.stringify({ error: "Not found" }));
     });
     httpServer.listen(port, () => {
-        console.error(`Salesforce Metadata MCP server v2.5.4 running on http://localhost:${port}/mcp`);
+        console.error(`Salesforce Metadata MCP server v2.5.5 running on http://localhost:${port}/mcp`);
     });
 }
 // ─── Entry point ──────────────────────────────────────────────────────────────

package/dist/schemas/index.js

@@ -950,7 +950,7 @@ export const CreateExternalObjectSchema = z.object({
 export const CreateRemoteSiteSettingSchema = z.object({
     fullName: z.string().min(1).regex(/^[A-Za-z][A-Za-z0-9_]*$/).describe("Remote site setting API name"),
     name: z.string().min(1).describe("Display name"),
-    url: z.string().url().describe("URL to whitelist for callouts, e.g. 'https://api.example.com'"),
+    url: z.string().url().describe("URL to allow for callouts, e.g. 'https://api.example.com'"),
     description: z.string().optional().describe("Description of why this site is trusted"),
     isActive: z.boolean().default(true).describe("Whether this remote site setting is active"),
     disableProtocolSecurity: z.boolean().default(false).describe("Disable protocol security (not recommended)"),