@salesforce/afv-skills 1.56.0 → 1.57.0

package/skills/experience-lwc-legacy-migrate/scripts/convert-lo-names.py

@@ -0,0 +1,94 @@
+#!/usr/bin/env python3
+"""Deterministic Lightning Out Beta -> LO 2.0 name/URL transforms.
+
+The Beta -> LO 2.0 migration includes a few *purely mechanical* string
+conversions that must be applied identically every time (Workflow B, Step B3):
+
+  * Aura component id ``c:myComponent`` -> LWC custom-element tag ``c-my-component``
+  * camelCase attribute names -> kebab-case HTML attribute names
+  * the org My Domain -> the versioned LO 2.0 library ``<script>`` URL
+
+This script performs those conversions so the workflow never has to hand-derive
+them. It does NOT make any judgement calls (target DOM location, whether an LO
+2.0 App id is needed, placeholder values) -- those stay in the skill body.
+
+Usage:
+  python3 scripts/convert-lo-names.py \
+      --component c:myComponent \
+      --attributes recordId,ownerId,showRevenue \
+      --my-domain https://acme.my.salesforce.com
+
+Any of the flags may be omitted; only the requested conversions are printed.
+Exit code is 0 on success, 2 on a malformed argument.
+"""
+import argparse
+import re
+import sys
+
+LO2_LIBRARY_PATH = "/lightning/lightning.out.latest/index.iife.prod.js"
+
+
+def camel_to_kebab(name: str) -> str:
+    """myComponent / MyComponent / my_component -> my-component."""
+    name = name.strip().replace("_", "-")
+    # split camelCase / PascalCase boundaries
+    name = re.sub(r"([a-z0-9])([A-Z])", r"\1-\2", name)
+    name = re.sub(r"([A-Z]+)([A-Z][a-z])", r"\1-\2", name)
+    return name.lower()
+
+
+def component_tag(aura_id: str) -> str:
+    """c:myComponent -> c-my-component (namespace preserved)."""
+    aura_id = aura_id.strip()
+    if ":" in aura_id:
+        ns, name = aura_id.split(":", 1)
+    else:
+        ns, name = "c", aura_id
+    return f"{ns.strip().lower()}-{camel_to_kebab(name)}"
+
+
+def library_url(my_domain: str) -> str:
+    """Normalize a My Domain to the versioned LO 2.0 library URL."""
+    d = my_domain.strip().rstrip("/")
+    if not d.startswith("http"):
+        d = "https://" + d
+    # Beta hosts on *.lightning.force.com; LO 2.0 must load from *.my.salesforce.com
+    d = d.replace(".lightning.force.com", ".my.salesforce.com")
+    # strip any path the caller pasted, keep scheme://host
+    m = re.match(r"(https?://[^/]+)", d)
+    host = m.group(1) if m else d
+    return f"{host}{LO2_LIBRARY_PATH}"
+
+
+def main(argv=None) -> int:
+    p = argparse.ArgumentParser(description=__doc__,
+                                formatter_class=argparse.RawDescriptionHelpFormatter)
+    p.add_argument("--component", help="Beta component id, e.g. c:myComponent")
+    p.add_argument("--attributes",
+                   help="comma/space separated camelCase attribute names")
+    p.add_argument("--my-domain",
+                   help="org My Domain or Beta host URL")
+    args = p.parse_args(argv)
+
+    if not (args.component or args.attributes or args.my_domain):
+        p.print_help()
+        return 2
+
+    if args.component:
+        print(f"component-tag: <{component_tag(args.component)}>")
+
+    if args.attributes:
+        raw = [a for a in re.split(r"[,\s]+", args.attributes) if a]
+        pairs = [(a, camel_to_kebab(a)) for a in raw]
+        print("attributes:")
+        for src, dst in pairs:
+            print(f"  {src} -> {dst}")
+
+    if args.my_domain:
+        print(f"library-url: {library_url(args.my_domain)}  (add the `async` attribute)")
+
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/skills/experience-lwc-legacy-migrate/scripts/validate-lo20-page.py

@@ -0,0 +1,133 @@
+#!/usr/bin/env python3
+"""Mechanically validate a migrated Lightning Out 2.0 host page.
+
+The six non-negotiable LO 2.0 rules (Workflow B, Step B4) plus the core
+library/component checklist items are all *deterministic code-structure*
+checks. This script runs them against a migrated HTML host page so the
+workflow gates on a repeatable pass/fail instead of prose interpretation.
+
+Usage:
+  python3 scripts/validate-lo20-page.py <path-to-migrated.html>
+
+Prints one PASS/FAIL line per rule. Exits 0 only when every rule passes;
+exits 1 if any rule fails, 2 on a usage/IO error.
+"""
+import re
+import sys
+
+
+def check(src: str):
+    """Return a list of (ok: bool, label: str, detail: str)."""
+    results = []
+
+    def add(ok, label, detail=""):
+        results.append((ok, label, detail))
+
+    # --- Library / Beta removal -------------------------------------------
+    # Locate the versioned library path, then scan back to the opening
+    # <script to check for `async`. We do NOT isolate the tag with [^>]*
+    # because placeholder URLs like https://<DOMAIN>.my.salesforce.com
+    # legitimately contain a '>' inside the attribute value.
+    lib_path = "lightning.out.latest/index.iife.prod.js"
+    idx = src.find(lib_path)
+    has_lo2_lib = idx != -1
+    lib_async = False
+    if has_lo2_lib:
+        start = src.rfind("<script", 0, idx)
+        if start != -1:
+            lib_async = bool(re.search(r"\basync\b", src[start:idx]))
+    add(has_lo2_lib and lib_async, "LO 2.0 library script tag",
+        "must load .../lightning.out.latest/index.iife.prod.js with `async`")
+
+    beta_lib = bool(re.search(r"lightning\.force\.com/[^\"']*lightning\.out\.js", src))
+    beta_calls = bool(re.search(r"\$Lightning\.(use|createComponent)", src))
+    add(not beta_lib and not beta_calls, "No Lightning Out Beta remnants",
+        "no lightning.out.js / $Lightning.use / $Lightning.createComponent")
+
+    # --- Rule 1: customElements.whenDefined must use a literal string ------
+    wd = re.findall(r"customElements\.whenDefined\(\s*([^)]*?)\s*\)", src)
+    if not wd:
+        add(False, "Rule 1: whenDefined literal string",
+            "no customElements.whenDefined(...) call found")
+    else:
+        # Require the ENTIRE trimmed argument to be a single quoted string
+        # literal. A prefix-only check (starts with a quote) would let
+        # expressions like `'c-' + componentTag` slip through.
+        all_literal = all(
+            re.fullmatch(r"""(['"]).*?\1""", arg.strip()) for arg in wd)
+        add(all_literal, "Rule 1: whenDefined literal string",
+            "argument must be a quoted string, not the `components` variable")
+
+    # --- Rule 2: mountLo20 declared with two parameters -------------------
+    decl = re.search(r"function\s+mountLo20\s*\(([^)]*)\)", src)
+    if not decl:
+        add(False, "Rule 2: mountLo20(frontdoorUrl, orgUrl)",
+            "no `function mountLo20(...)` declaration found")
+    else:
+        params = [p for p in decl.group(1).split(",") if p.strip()]
+        add(len(params) == 2, "Rule 2: mountLo20(frontdoorUrl, orgUrl)",
+            f"declaration has {len(params)} parameter(s), expected 2")
+
+    # --- Rule 3: clearCachedResult present (called before mounting) -------
+    add(bool(re.search(r"clearCachedResult\s*\(", src)),
+        "Rule 3: clearCachedResult() before mount",
+        "clearCachedResult() must run before every mountLo20() call")
+
+    # --- Rule 4: every mountLo20 call passes two arguments ----------------
+    calls = re.findall(r"(?<!function\s)\bmountLo20\s*\(([^)]*)\)", src)
+    # Count args for EVERY call site (the declaration is excluded by the
+    # lookbehind). Do NOT skip empty argument lists: a zero-arg
+    # `mountLo20()` has an arg count of 0, which is != 2 and must fail.
+    bad_calls = [c for c in calls
+                 if len([a for a in c.split(",") if a.strip()]) != 2]
+    add(len(bad_calls) == 0, "Rule 4: mountLo20 calls pass two args",
+        f"{len(bad_calls)} call(s) do not pass exactly two arguments")
+
+    # --- Rule 5: boot() wrapper defined and invoked -----------------------
+    boot_def = bool(re.search(r"function\s+boot\s*\(", src))
+    boot_call = bool(re.search(r"(?<!function\s)\bboot\s*\(\s*\)", src))
+    add(boot_def and boot_call, "Rule 5: boot() wrapper",
+        "define function boot() and call boot() once at the end")
+
+    # --- Rule 6: component tag has no inline display style ----------------
+    comp_tags = re.findall(r"<c-[a-z0-9-]+[^>]*>", src)
+    add(len(comp_tags) > 0, "Component tag present",
+        "expected a <c-...> custom element in the HTML")
+    inline_hidden = any(re.search(r"style\s*=\s*['\"][^'\"]*display\s*:\s*none",
+                                  t) for t in comp_tags)
+    add(not inline_hidden, "Rule 6: no inline display:none on component tag",
+        "control visibility via the loading indicator, not the component tag")
+
+    return results
+
+
+def main(argv=None) -> int:
+    argv = argv if argv is not None else sys.argv[1:]
+    if len(argv) != 1:
+        print("usage: validate-lo20-page.py <path-to-migrated.html>",
+              file=sys.stderr)
+        return 2
+    try:
+        with open(argv[0], "r", encoding="utf-8") as fh:
+            src = fh.read()
+    except OSError as e:
+        print(f"error: cannot read {argv[0]}: {e}", file=sys.stderr)
+        return 2
+
+    results = check(src)
+    failed = 0
+    for ok, label, detail in results:
+        mark = "PASS" if ok else "FAIL"
+        line = f"[{mark}] {label}"
+        if not ok and detail:
+            line += f" -- {detail}"
+        print(line)
+        if not ok:
+            failed += 1
+
+    print(f"\n{len(results) - failed}/{len(results)} checks passed")
+    return 0 if failed == 0 else 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/skills/experience-ui-bundle-project-generate/SKILL.md

@@ -113,4 +113,4 @@ From here, continue development with the other ui-bundle skills (`experience-ui-
 
 - The starters are **minimal** — no seeded sample data or custom objects. Build the rest with the other ui-bundle skills.
 - These templates use the `uiBundles` metadata convention. The UI bundle directory and meta XML are named after the project name you pass to `--name`.
-- `sf template generate project --help` lists all available templates if the flag names ever change.
+- `sf template generate project --help` lists all available templates if the flag names ever change.

package/skills/integration-connectivity-connected-app-configure/SKILL.md

@@ -38,8 +38,8 @@ Use this skill when the user needs **OAuth app configuration** in Salesforce: Co
 
 **Out of scope — delegate elsewhere:**
 - Configuring Named Credentials or runtime callouts → [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md)
-- Deploying metadata to orgs → [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md)
-- Writing Apex token-handling code → [platform-apex-generate](../platform-apex-generate/SKILL.md)
+- Deploying metadata to orgs → the `platform-metadata-deploy` skill
+- Writing Apex token-handling code → the `platform-apex-generate` skill
 
 ---
 
@@ -206,8 +206,8 @@ Score: <x>/120
 | Need | Delegate to | Reason |
 |---|---|---|
 | Named Credential / callout runtime config | [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md) | runtime integration setup |
-| Deploy app metadata | [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md) | org validation and deployment |
-| Apex token or refresh handling | [platform-apex-generate](../platform-apex-generate/SKILL.md) | implementation logic |
+| Deploy app metadata | `platform-metadata-deploy` skill | org validation and deployment |
+| Apex token or refresh handling | `platform-apex-generate` skill | implementation logic |
 
 ---
 
@@ -237,4 +237,4 @@ Score: <x>/120
 | `references/security-checklist.md` | Step 4 — full 120-point security scoring checklist |
 | `references/testing-validation-guide.md` | Step 5 — pre-deployment validation and testing guide |
 | `references/migration-guide.md` | When migrating from Connected App to ECA patterns |
-| `references/example-usage.md` | Full end-to-end examples for common OAuth scenarios |
+| `references/example-usage.md` | Full end-to-end examples for common OAuth scenarios |

package/skills/integration-connectivity-generate/SKILL.md

@@ -39,9 +39,9 @@ Use `integration-connectivity-generate` when the work involves:
 
 Delegate elsewhere when the user is:
 - configuring the OAuth app itself → [integration-connectivity-connected-app-configure](../integration-connectivity-connected-app-configure/SKILL.md)
-- writing Apex-only business logic → [platform-apex-generate](../platform-apex-generate/SKILL.md)
-- deploying metadata → [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md)
-- importing/exporting data → [platform-data-manage](../platform-data-manage/SKILL.md)
+- writing Apex-only business logic → the `platform-apex-generate` skill
+- deploying metadata → the `platform-metadata-deploy` skill
+- importing/exporting data → the `platform-data-manage` skill
 
 ---
 
@@ -93,9 +93,9 @@ Check:
 
 ### 5. Hand off deployment or implementation details
 Use:
-- [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md) for deployment
-- [platform-apex-generate](../platform-apex-generate/SKILL.md) for deeper service / retry code
-- [automation-flow-generate](../automation-flow-generate/SKILL.md) for declarative HTTP callout orchestration
+- the `platform-metadata-deploy` skill for deployment
+- the `platform-apex-generate` skill for deeper service / retry code
+- the `automation-flow-generate` skill for declarative HTTP callout orchestration
 
 ---
 
@@ -142,10 +142,10 @@ Next step: <deploy, register, test, or implement>
 | Need | Delegate to | Reason |
 |---|---|---|
 | OAuth app setup | [integration-connectivity-connected-app-configure](../integration-connectivity-connected-app-configure/SKILL.md) | consumer key / cert / app config |
-| advanced callout service code | [platform-apex-generate](../platform-apex-generate/SKILL.md) | Apex implementation |
-| declarative HTTP callout / Flow wrapper | [automation-flow-generate](../automation-flow-generate/SKILL.md) | Flow orchestration |
-| deploy integration metadata | [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md) | validation and rollout |
-| use integration from Agentforce | [agentforce-generate](../agentforce-generate/SKILL.md) | agent action composition |
+| advanced callout service code | `platform-apex-generate` skill | Apex implementation |
+| declarative HTTP callout / Flow wrapper | `automation-flow-generate` skill | Flow orchestration |
+| deploy integration metadata | `platform-metadata-deploy` skill | validation and rollout |
+| use integration from Agentforce | `agentforce-generate` skill | agent action composition |
 
 ---
 

package/skills/integration-connectivity-generate/scripts/configure-named-credential.sh

@@ -190,14 +190,14 @@ try {
     // Create the credential (first-time setup)
     ConnectApi.NamedCredentials.createCredential(newCredentials);
     System.debug('✓ External Credential configured successfully!');
-    System.debug('Principal: $PRINCIPAL_NAME');
+    System.debug('Principal: $PRINCIPAL_NAME_ESCAPED');
 } catch (Exception e) {
     // If already exists, try patching instead
     if (e.getMessage().contains('already exists')) {
         try {
             ConnectApi.NamedCredentials.patchCredential(newCredentials);
             System.debug('✓ External Credential updated successfully!');
-            System.debug('Principal: $PRINCIPAL_NAME');
+            System.debug('Principal: $PRINCIPAL_NAME_ESCAPED');
         } catch (Exception e2) {
             System.debug('✗ Error updating credential: ' + e2.getMessage());
             throw e2;

package/skills/platform-apex-test-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-apex-test-generate
-description: "Generate and validate Apex test classes with TestDataFactory patterns, bulk testing (251+ records), mocking strategies, assertion best practices, and disciplined test-fix loops. Use this skill when creating new Apex test classes, improving test coverage, debugging and fixing failing Apex tests, running test execution and coverage analysis, or implementing testing patterns for triggers, services, controllers, batch jobs, queueables, and integrations. Triggers on *Test.cls, *_Test.cls files, sf apex run test workflows, coverage reports, test-fix loops. Do NOT trigger for production Apex code (use platform-apex-generate) or Jest/LWC tests."
+description: "Use to generate and validate Apex test classes with TestDataFactory patterns, bulk testing (251+ records), mocking, assertions, and disciplined test-fix loops. Use when creating Apex test classes (for triggers, services, controllers, batch jobs, queueables, and callouts), improving coverage, debugging or fixing failing Apex tests, or running test/coverage analysis. Triggers on *Test.cls files, sf apex run test, coverage reports. Do NOT trigger for production Apex (use platform-apex-generate) or Jest/LWC tests."
 metadata:
   version: "1.1"
   domains: ["Platform"]

package/skills/platform-apex-test-run/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-apex-test-run
-description: "Apex test execution, coverage analysis, and test-fix loops with 120-point scoring. Use when the user needs to run Apex tests, check code coverage, fix failing tests, or work with *Test.cls / *_Test.cls files. TRIGGER when: user runs Apex tests, checks code coverage, fixes failing tests, or touches *Test.cls / *_Test.cls files. DO NOT TRIGGER when: writing Apex production code (use platform-apex-generate), Agentforce agent testing (use agentforce-test), or Jest/LWC tests (use experience-lwc-generate)."
+description: "Apex test execution, coverage analysis, and test-fix loops with 120-point scoring. Use when the user runs Apex tests, checks code coverage, fixes failing tests, or touches *Test.cls / *_Test.cls files. DO NOT TRIGGER when writing Apex production code (use platform-apex-generate), Agentforce agent testing (use agentforce-test), or Jest/LWC tests (use experience-lwc-generate)."
 metadata:
   version: "1.2"
   domains: ["Platform"]

package/skills/platform-custom-field-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-custom-field-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Custom Field metadata. Trigger when users mention custom fields, field types, Roll-up Summary fields, Master-Detail relationships, Lookup relationships, formula fields, picklists, dependent (controlling) picklists, referencing a value set from a field, or scoping/limiting picklist values for a specific record type. Also use when users encounter field deployment errors, especially around Roll-up Summary format, Master-Detail constraints, formula issues, or a record type that won't deploy without a business process. Use this skill for custom field metadata work, field generation, and field troubleshooting. DO NOT TRIGGER for creating or customizing the value set itself — defining a new GlobalValueSet, or modifying a StandardValueSet catalog like Industry or Lead Source — use platform-value-set-generate instead; this skill covers the field that references a value set, not the value set definition."
+description: "Use when users create, generate, or validate Salesforce Custom Field metadata. Trigger on custom fields, field types, Roll-Up Summary, Master-Detail/Lookup relationships, formula fields, picklists, dependent (controlling) picklists, referencing a value set from a field, or scoping picklist values per record type; also field deployment errors, including a record type that won't deploy without a business process. DO NOT TRIGGER for creating/customizing the value set itself — a new GlobalValueSet or a StandardValueSet catalog like Industry — use platform-value-set-generate; this skill covers the field that references a value set, not the value set definition."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/platform-custom-lightning-type-generate/SKILL.md

@@ -178,4 +178,4 @@ When you need the full list of supported primitive `lightning:type` identifiers,
 - [ ] Layout configurations use `lightning/propertyLayout` with ONLY the `property` attribute (no `label`, `title`, or other attributes)
 - [ ] All attribute mappings (`{!$attrs.propertyName}`) reference properties that exist in the type schema
 - [ ] Custom LWC components have correct targets in `-meta.xml`: `lightning__AgentforceInput` for editors, `lightning__AgentforceOutput` for renderers
-- [ ] Root schema does NOT include `"$schema"` field
+- [ ] Root schema does NOT include `"$schema"` field

package/skills/platform-custom-metadata-type-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-custom-metadata-type-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Custom Metadata Type metadata — the __mdt object, its fields, and its deployable records. Trigger when users mention custom metadata types, CMDT, __mdt objects, custom metadata records, .md-meta.xml files, or reference/config data that must ship between orgs. Also trigger for admin-maintained mapping, lookup, or crosswalk tables and field mappings (\"map fields from A to B\", code lookups) — config admins change without a code deploy belongs in a CMDT, never hardcoded in Apex or Flow — and when troubleshooting CMDT record/type deploy errors. DO NOT TRIGGER for Custom Settings — route to platform-custom-setting-generate; for regular custom objects holding business records — use platform-custom-object-generate; or for secrets and API keys — recommend a Named Credential, which this skill never generates."
+description: "Use to create, generate, or validate Salesforce Custom Metadata Type metadata — the __mdt object, fields, and deployable records. Trigger on custom metadata types, CMDT, __mdt objects, .md-meta.xml files, or cross-org reference/config data; also admin-maintained mapping/lookup/crosswalk tables (config that changes without a deploy belongs in a CMDT, never hardcoded in Apex/Flow), and CMDT deploy errors. DO NOT TRIGGER for Custom Settings (use platform-custom-setting-generate), business-record objects (use platform-custom-object-generate), or secrets/API keys (use a Named Credential)."
 metadata:
   version: "1.0"
   minApiVersion: "60.0"

package/skills/platform-custom-object-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-custom-object-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Custom Object metadata. Trigger when users mention custom objects, creating objects, object metadata, .object files, sharing models, name fields, or validation rules on objects. Also use when users say things like \"create a custom object\", \"generate object metadata\", \"set up an object for...\", or when they're troubleshooting object deployment errors especially around sharing models and Master-Detail relationships. Always use this skill for any custom object metadata work, including enriching and keeping the object's description current whenever its fields or validation rules change. Do NOT use this skill for non-Custom-Object metadata (Apex, Flows, LWC, Permission Sets, Custom Metadata Types) or for standard Salesforce objects."
+description: "Use when users create, generate, or validate Salesforce Custom Object metadata. Trigger on custom objects, .object files, sharing models, name fields, or validation rules — e.g. \"create a custom object\" — and deployment errors around sharing models and Master-Detail relationships. Also keep the object's <description> current when its fields or validation rules change. Do NOT use for non-Custom-Object metadata (Apex, Flows, LWC, Permission Sets, Custom Metadata Types) or standard objects."
 metadata:
   version: "1.1"
   domains: ["Platform"]

package/skills/platform-custom-report-type-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-custom-report-type-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Custom Report Type metadata. Trigger when users mention custom report types, report types, CRTs, reporting frameworks, cross-object reports, report builder data sources, or ask to expose fields for reporting across related objects. Also use when users mention primary and related objects for reports, inner vs outer joins in reports, report type categories, or encounter deployment errors for .reportType-meta.xml files. Do NOT trigger for: running, editing, or filtering existing reports; creating report folders, dashboards, or list views; or general reporting questions that don't involve authoring a .reportType-meta.xml file."
+description: "Use to create, generate, or validate Salesforce Custom Report Type metadata. Trigger on custom report types, CRTs, cross-object reports, report builder data sources, exposing fields for reporting across related objects, inner vs outer joins in reports, report type categories, or deployment errors for .reportType-meta.xml files. Do NOT trigger for running, editing, or filtering existing reports; creating report folders, dashboards, or list views; or non-authoring reporting questions."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/platform-custom-setting-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-custom-setting-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Custom Setting metadata. Trigger when users mention custom settings (hierarchy or list), customSettingsType, SetupOwnerId, per-profile/per-user config overrides, feature flags, feature toggles, kill switches, or on/off switches admins flip to enable/disable behavior, e.g. bypass triggers/automation during a data load. Also use for \"create a custom setting\" or errors like \"Cannot specify: pluralLabel for CustomSettings\" or a setting that silently deployed as a regular custom object. A trigger bypass or kill switch is just a checkbox on a hierarchy custom setting — generate ONLY the setting, never an Apex trigger/handler. DO NOT TRIGGER for Custom Metadata Types or __mdt objects — route to platform-custom-metadata-type-generate; for business-record objects — use platform-custom-object-generate; for secrets, API keys, passwords, or tokens — recommend a Named Credential, never generated here."
+description: "Use to create, generate, or validate Salesforce Custom Setting metadata. Trigger on custom settings (hierarchy/list), customSettingsType, SetupOwnerId, per-profile/per-user config overrides, feature flags/toggles, kill switches, or admin on/off switches (e.g. bypass triggers during a data load); also \"create a custom setting\" or a setting that silently deployed as a regular object. A kill switch is just a checkbox on a hierarchy setting — generate ONLY the setting, never an Apex trigger/handler. DO NOT TRIGGER for Custom Metadata Types (use platform-custom-metadata-type-generate), business-record objects (use platform-custom-object-generate), or secrets/tokens (use a Named Credential)."
 metadata:
   version: "1.0"
   minApiVersion: "60.0"

package/skills/platform-data-and-tooling-api-context-get/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-data-and-tooling-api-context-get
-description: "Authoritative field/schema reference for 2130 STANDARD Salesforce objects — use to look up standard sObject and Tooling field API names, types, properties (filterable/sortable/groupable/updateable), and relationship names for Account, Contact, Opportunity, Lead, Case, ApexClass, ApexCodeCoverage, TraceFlag, and more. Load this alongside a SOQL/query/Apex skill when the field names, types, or Filter/Sort/Group capabilities are unverified — not when the fields are already known and only query syntax or optimization is needed. TRIGGER when verifying, validating, or debugging fields in a SOQL/SOSL query or DML against a standard object — capabilities, relationship/subquery paths, or what fields an object has — so the query runs instead of guessing. Custom __c objects and __c fields are NOT in these assets; describe the live org for those (sf sobject describe). DO NOT TRIGGER for authoring/deploying *-meta.xml or sfdx source (use the Metadata API skill)."
+description: "Authoritative field/schema reference for 2130 STANDARD Salesforce objects — sObject and Tooling field API names, types, properties (filterable/sortable/groupable/updateable), and relationships for Account, Contact, Opportunity, Lead, Case, ApexClass, and more. Load alongside a SOQL/Apex skill when fields/types/capabilities are unverified — not for query syntax or optimization alone. TRIGGER when verifying/debugging fields in a SOQL/SOSL query or DML against a standard object. Custom __c objects/fields are NOT covered — describe the live org (sf sobject describe). DO NOT TRIGGER for authoring/deploying *-meta.xml or sfdx source (use the Metadata API skill)."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/platform-data-manage/SKILL.md

@@ -1,14 +1,9 @@
 ---
 name: platform-data-manage
-description: "Salesforce data operations with 130-point scoring. Use this skill to create, update, delete, bulk import/export, generate test data, and clean up org records using sf CLI and anonymous Apex. TRIGGER when: user creates test data, performs bulk import/export, uses sf data CLI commands, needs data factory patterns for Apex tests, or needs to seed/clean records in a Salesforce org. DO NOT TRIGGER when: SOQL query writing only (use platform-soql-query), Apex test execution (use platform-apex-test-run), or metadata deployment (use platform-metadata-deploy)."
+description: "Salesforce data operations with 130-point scoring. Use to create, update, delete, bulk import/export, generate test data, and clean up org records via sf CLI and anonymous Apex. TRIGGER on creating test data, bulk import/export, sf data CLI commands, data-factory patterns for Apex tests, or seeding/cleaning org records. DO NOT TRIGGER for SOQL query writing only (use platform-soql-query), Apex test execution (use platform-apex-test-run), or metadata deployment (use platform-metadata-deploy)."
 metadata:
-  cliTools:
-    - tool: ["jq"]
-      semver: ">=1.6.0"
-    - tool: ["python3"]
-      semver: ">=3.8.0"
-    - tool: ["sf"]
-      semver: ">=2.0.0"
+  version: "1.1"
+  domains: ["Platform"]
   relatedSkills:
     - "automation-flow-generate"
     - "platform-apex-generate"
@@ -17,8 +12,13 @@ metadata:
     - "platform-custom-object-generate"
     - "platform-metadata-deploy"
     - "platform-soql-query"
-  version: "1.1"
-  domains: ["Platform"]
+  cliTools:
+    - tool: ["sf"]
+      semver: ">=2.0.0"
+    - tool: ["jq"]
+      semver: ">=1.6.0"
+    - tool: ["python3"]
+      semver: ">=3.8.0"
 ---
 
 # Salesforce Data Operations Expert (platform-data-manage)

package/skills/platform-flexipage-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-flexipage-generate
-description: "Use this skill when users need to create, generate, modify, or validate Salesforce Lightning pages (FlexiPages). Trigger when users mention RecordPage, AppPage, HomePage, Lightning pages, page layouts, adding components to pages, or page customization. Also use when users say things like 'create a Lightning page', 'add a component to a page', 'customize the record page', 'generate a FlexiPage', or when they're working with FlexiPage XML files and need help with components, regions, or deployment errors. Always use this skill for any FlexiPage-related work, even if they just mention 'page' in the context of Salesforce. DO NOT TRIGGER when users ask about Visualforce pages, Aura components without FlexiPage context, page layout assignments in the UI, or Lightning Web Component development that does not involve placing components on a FlexiPage."
+description: "Use when users create, generate, modify, or validate Salesforce Lightning pages (FlexiPages). Trigger on RecordPage, AppPage, HomePage, Lightning pages, adding components to a page, page customization (e.g. 'customize the record page'), or .flexipage-meta.xml files (regions, components, deployment errors). DO NOT TRIGGER for Visualforce pages, page layout assignments in the UI, UI Bundle/Experience Cloud site pages, or Aura/Lightning Web Component development without FlexiPage context."
 allowed-tools: Bash Read Write
 metadata:
   version: "1.1"

package/skills/platform-lightning-app-coordinate/SKILL.md

@@ -438,4 +438,4 @@ Check for:
 - Reserved words in API names
 - Relationship limits (max 2 M-D per object)
 - Name length limits
-- Duplicate names
+- Duplicate names

package/skills/platform-metadata-api-context-get/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-metadata-api-context-get
-description: "REQUIRED companion for Salesforce metadata generation — load this schema/API-context skill in the SAME turn as ANY metadata generation skill; if you load a generator, you ALSO load this. Use it whenever you create, generate, add, edit, or author metadata or a *-meta.xml file: custom object, custom field, formula field, picklist, lookup, master-detail, validation rule, permission set, profile, custom tab, lightning record page, flexipage, list view, custom application, flow, layout, record type, sharing rules, report, and 604 Metadata API types. It provides the authoritative schema, fields, field properties, required flags, allowed enum values, and XML structure so generated *-meta.xml deploys cleanly — skipping it causes hallucinated element names and deploy failures. Trigger on *-meta.xml, metadata schema, api context, 'Salesforce metadata', or 'sfdx project'. DO NOT use for SOQL, DML, runtime sObject access, or Tooling API records."
+description: "REQUIRED companion for Salesforce metadata generation — load this schema/API-context skill in the SAME turn as ANY metadata generator (if you load a generator, you ALSO load this). Use whenever you create, generate, edit, or author metadata or a *-meta.xml file (custom object, field, flow, and 604 Metadata API types): it gives authoritative schema, required flags, and XML structure so files deploy cleanly. Trigger on *-meta.xml, metadata schema, api context. DO NOT use for SOQL, DML, runtime sObject access, or Tooling API records."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/platform-metadata-retrieve/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-metadata-retrieve
-description: "ALWAYS USE THIS SKILL to retrieve metadata from an org to your local project using the sf project retrieve start command. Supports multiple retrieval modes: retrieve all remote changes, retrieve by source directory, retrieve by metadata type with wildcards, retrieve by manifest (package.xml), or retrieve by package name. Use when the user asks to retrieve, pull, sync, or download metadata, Apex classes, custom objects, or org changes. Supports source format (default) or metadata format (ZIP). DO NOT TRIGGER for deploying metadata (use platform-metadata-deploy skill), listing metadata, or generating package.xml. NEVER use MCP tools - always use this skill and the Bash tool with sf project retrieve start."
+description: "ALWAYS USE THIS SKILL to retrieve metadata from an org to your local project with sf project retrieve start. Supports retrieval by all changes, source directory, metadata type (wildcards), manifest (package.xml), or package name, in source or metadata (ZIP) format. Use when the user asks to retrieve, pull, sync, or download metadata, Apex classes, or custom objects. DO NOT TRIGGER for deploying metadata (use platform-metadata-deploy), listing metadata, or generating a package.xml (use platform-manifest-generate). NEVER use MCP tools."
 metadata:
   version: "1.0"
   domains: ["Platform", "Developer Experience"]

package/skills/platform-permission-set-generate/SKILL.md

@@ -186,4 +186,4 @@ Before deploying, verify:
 
 ## Deployment
 
-Deploy using Salesforce CLI
+Deploy using Salesforce CLI

package/skills/platform-report-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-report-generate
-description: "Use this skill when users need to create, generate, or validate Salesforce Lightning Report metadata. Trigger when users mention reports, creating reports, report metadata, .report-meta.xml files, tabular reports, summary reports, matrix reports, joined reports, report columns, report groupings, report filters, report charts, cross-filters, bucket fields, report formulas, or report time frame filters. Also use when users say things like 'create a report', 'generate a report', 'build a report on Accounts', 'add a chart to my report', or when they encounter deployment errors for .report-meta.xml files. Do NOT trigger for: creating or modifying Custom Report Type metadata (.reportType-meta.xml — use platform-custom-report-type-generate), creating dashboards, creating list views, running or viewing existing reports in the UI, or SOQL queries."
+description: "Use when users create, generate, or validate Salesforce Lightning Report metadata (.report-meta.xml) — tabular, summary, matrix, or joined reports with columns, groupings, filters, charts, cross-filters, buckets, formulas, or time-frame filters. Triggers on \"create a report\", \"build a report\", \"add a chart\", or .report-meta.xml deploy errors. Do NOT trigger for Custom Report Type metadata (use platform-custom-report-type-generate), dashboards, list views, running reports in the UI, or SOQL."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/platform-salesforce-connect-adapter-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-salesforce-connect-adapter-generate
-description: "Custom Apex adapter generation for Salesforce Connect — connects any external REST API to Salesforce as live, queryable External Objects without ETL or data copying. TRIGGER when: user wants to connect a non-standard external API to Salesforce, asks to write a DataSource.Provider or DataSource.Connection, wants to surface external data as Salesforce records, says \"connect my API to Salesforce without copying data\", or asks whether custom Apex is the right approach for any system. Also trigger on: \"custom adapter\", \"ExternalId field\", \"DataSource namespace\". DO NOT TRIGGER when: user is configuring a standard adapter they already have and is NOT asking about custom Apex (e.g., OData endpoint setup, Snowflake connector config). DO NOT TRIGGER when: user wants to copy or bulk-sync data — use platform-data-manage. DO NOT TRIGGER for Apex callouts outside Connect — use platform-apex-generate or integration-connectivity-generate."
+description: "Custom Apex adapter generation for Salesforce Connect — connects any external REST API to Salesforce as live, queryable External Objects without ETL or copying. TRIGGER when: connecting a non-standard external API, writing a DataSource.Provider/Connection or a `.cls`/`.cls-meta.xml` custom adapter class, adding a `.namedCredential-meta.xml` for the adapter's callout, surfacing external data as records, \"custom adapter\", \"ExternalId field\", \"DataSource namespace\", or whether custom Apex fits. DO NOT TRIGGER when: a standard adapter is already configured (OData, Snowflake), for copy/bulk-sync (use platform-data-manage), or for Apex callouts outside Connect (use platform-apex-generate or integration-connectivity-generate)."
 metadata:
   version: "1.0"
   minApiVersion: "66.0"
@@ -26,7 +26,7 @@ Route the user through building a complete custom Salesforce Connect Apex adapte
 
 **In scope:** Generating `DataSource.Connection` and `DataSource.Provider` Apex classes, Named Credential metadata, deployment via sf CLI, and step-by-step Setup registration guidance for any REST API.
 
-**Out of scope:** Configuring standard adapters (OData, Snowflake, GraphQL — those have their own flows). Generating the External Data Source metadata file (not deployable via sf CLI — must be registered manually in Setup). Writing Apex that calls external APIs outside the Salesforce Connect framework (use [platform-apex-generate](../platform-apex-generate/SKILL.md) or [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md)).
+**Out of scope:** Configuring standard adapters (OData, Snowflake, GraphQL — those have their own flows). Generating the External Data Source metadata file (not deployable via sf CLI — must be registered manually in Setup). Writing Apex that calls external APIs outside the Salesforce Connect framework (use the platform-apex-generate or integration-connectivity-generate skills).
 
 ## Before starting
 
@@ -37,11 +37,11 @@ Confirm two things. If either is missing, ask before proceeding.
 | The user wants to… | Right tool |
 |---|---|
 | Query external data live without copying it — read-only or read-write, appears as Salesforce records | **This skill** |
-| Copy or sync data into Salesforce on a schedule | [platform-data-manage](../platform-data-manage/SKILL.md) |
+| Copy or sync data into Salesforce on a schedule | the platform-data-manage skill |
 | Connect to OData, GraphQL, DynamoDB, Athena, or Cross-Org | Standard adapter setup — no Apex needed, different flow |
 | Connect to Snowflake via Salesforce's native Snowflake adapter (direct Snowflake protocol) | Built-in Snowflake adapter — no Apex needed |
 | Access Snowflake (or any database) data via a REST or HTTP API | **This skill** — Snowflake REST endpoint → custom Apex adapter |
-| Call an external API from Apex or Flow logic | [platform-apex-generate](../platform-apex-generate/SKILL.md) or [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md) |
+| Call an external API from Apex or Flow logic | the platform-apex-generate skill or [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md) |
 | Expose Salesforce data to an external system | [integration-connectivity-generate](../integration-connectivity-generate/SKILL.md) |
 | Receive real-time pushed data or subscribe to external events | Not Salesforce Connect — Connect is pull-only. Use Platform Events or Change Data Capture instead |
 | Sync or copy data for analytics or bulk processing | Data Cloud or ETL — Connect is zero-copy virtualization only |

package/skills/platform-sharing-owd-configure/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-sharing-owd-configure
-description: "Use when the user wants to retrieve or update Organization-Wide Default (OWD) sharing settings for Salesforce objects. TRIGGER when: user asks to check current OWD settings, view sharing defaults, change default access levels (Private, Public Read Only, Public Read/Write, Controlled by Parent), configure internal or external access for standard or custom objects, mentions org-wide defaults, wants to make records private or restrict who can see records, wants to control default record visibility for an object, or references .settings-meta.xml sharing fields or sharingModel in .object-meta.xml files. DO NOT TRIGGER when: user asks about sharing rules, criteria-based sharing, role hierarchy, or manual sharing — delegate to platform-sharing-rules-generate."
+description: "Use when the user wants to retrieve or update Organization-Wide Default (OWD) sharing settings for Salesforce objects. TRIGGER on org-wide defaults, checking/viewing sharing defaults, changing default access levels (Private, Public Read Only, Public Read/Write, Controlled by Parent), internal/external access for standard or custom objects, making records private, or sharingModel in .object-meta.xml files. DO NOT TRIGGER for sharing rules, criteria-based sharing, role hierarchy, or manual sharing — delegate to platform-sharing-rules-generate."
 metadata:
   relatedSkills:
     - "platform-metadata-deploy"

package/skills/platform-sharing-rules-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-sharing-rules-generate
-description: "Use this skill when users need to get, create, edit, delete, or manage Salesforce Sharing Rules metadata. TRIGGER when: users mention sharing rules, record sharing, criteria-based sharing, role-based sharing, guest user sharing, sharingRules, sharingCriteriaRules, sharingGuestRules, sharingOwnerRules, .sharingRules-meta.xml files, or ask to share records with specific roles or groups. Also trigger when users want to retrieve or view existing sharing rules from an org, modify or remove existing sharing rules, or update sharing rule criteria or access levels. DO NOT TRIGGER when user needs permission sets or profiles (use platform-permission-set-generate), or needs object-level security rather than record-level sharing (use platform-permission-set-generate)."
+description: "Use when users get, create, edit, delete, or retrieve Salesforce Sharing Rules metadata for record-level access. TRIGGER on sharing rules, record/criteria-based/role-based/guest-user sharing, sharingCriteriaRules/sharingOwnerRules/sharingGuestRules, .sharingRules-meta.xml files, or sharing records with roles or groups, including viewing or modifying existing rules. DO NOT TRIGGER for permission sets/profiles or object-level (not record-level) security (use platform-permission-set-generate)."
 metadata:
   version: "1.3"
   domains: ["Platform"]

package/skills/platform-soql-query/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-soql-query
-description: "SOQL query generation, optimization, and analysis with 100-point scoring. Use this skill when the user needs SOQL/SOSL authoring or optimization: natural-language-to-query generation, relationship queries, aggregates, query-plan analysis, and performance or safety improvements for Salesforce queries. TRIGGER when: user writes, optimizes, or debugs SOQL/SOSL queries, touches .soql files, or asks about relationship queries, aggregates, or query performance. DO NOT TRIGGER when: bulk data operations (use platform-data-manage), Apex DML logic (use platform-apex-generate), or report/dashboard queries."
+description: "Use when the user needs SOQL/SOSL authoring or optimization: natural-language-to-query generation, relationship queries, aggregates, query-plan/selectivity analysis, and performance or safety improvements. TRIGGER when the user writes, optimizes, or debugs SOQL/SOSL, touches .soql files, or asks about relationship queries, aggregates, or query performance. DO NOT TRIGGER for bulk data operations (use platform-data-manage), Apex DML logic (use platform-apex-generate), or report/dashboard queries."
 metadata:
   version: "1.1"
   domains: ["Platform"]

package/skills/platform-value-set-generate/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: platform-value-set-generate
-description: "Use this skill when users need to create, generate, or validate a Salesforce global value set or customize a standard value set. Trigger when users mention a global value set, GlobalValueSet, standard value set, StandardValueSet, a reusable picklist, a picklist value set shared across fields, or customizing standard picklists like Industry, Lead Source, or Opportunity Stage. Also use when users hit deployment errors adding values to a standard picklist, referencing a value set from a custom field, or working with .globalValueSet-meta.xml or .standardValueSet-meta.xml files. DO NOT TRIGGER for an inline one-off picklist on a single field with no reuse, or for general custom field metadata work that does not involve a GlobalValueSet or StandardValueSet — use platform-custom-field-generate instead."
+description: "Use to create, generate, or validate a Salesforce GlobalValueSet (reusable picklist shared across fields) or customize a StandardValueSet (built-in picklists like Industry, Lead Source, Opportunity Stage). Trigger on global/standard value set, reusable picklist, .globalValueSet-meta.xml or .standardValueSet-meta.xml, or deploy errors adding values to a standard picklist. DO NOT TRIGGER for a one-off inline picklist on a single field with no reuse — use platform-custom-field-generate."
 metadata:
   version: "1.0"
   domains: ["Platform"]

package/skills/service-agentforce-human-escalation-configure/SKILL.md

@@ -196,6 +196,10 @@ A single JSON object to stdout:
 
 Existing queue, `QueueSobject`, `QueueRoutingConfig`, queue members, and an already-active outbound flow are reused, not recreated (members are only added when the queue has zero active members and `QUEUE_MEMBER_USERNAMES` is supplied; already-present members are left untouched). The doc-driven edits (`canEscalate`, `outboundRouteConfigs`) are set-if-absent. A second run against a fully configured org performs no writes and returns `CONFIGURED`.
 
+## Classifier contracts
+
+Before investigating or changing any of the deterministic Node classifiers referenced above (`scripts/classify-agent-active.mjs`, `scripts/verify-escalation-config.mjs`, `scripts/extract-outbound-route.mjs`, `scripts/classify-nga-escalation.mjs`), read [references/classifier-contracts.md](references/classifier-contracts.md) for each one's exact input/output contract.
+
 ## Verification
 
 Run the bundled escalation contract tests after changing this skill or its scripts: