sf-intelligence 0.1.0 → 0.1.4

package/dist/index.js

@@ -1053,12 +1053,34 @@ var init_resolve = __esm({
           qt,
           ...scoreToken(qt, node.tokens)
         }));
+        const nameMatchedSomething = perToken.some((t) => t.score >= MATCHED_FLOOR);
+        let parentMatched = false;
+        if (nameMatchedSomething && node.parentApiName) {
+          const parentTokens = tokenizeText(node.parentApiName);
+          if (parentTokens.length > 0) {
+            for (let i = 0; i < perToken.length; i += 1) {
+              if (perToken[i].score >= MATCHED_FLOOR)
+                continue;
+              const pm = scoreToken(queryTokens[i], parentTokens);
+              if (pm.score > perToken[i].score) {
+                perToken[i] = {
+                  qt: queryTokens[i],
+                  score: pm.score,
+                  kind: "substring",
+                  matchedToken: pm.matchedToken
+                };
+                if (pm.score >= MATCHED_FLOOR)
+                  parentMatched = true;
+              }
+            }
+          }
+        }
         for (let i = 0; i < perToken.length; i += 1) {
           if (perToken[i].score > globalBest[i])
             globalBest[i] = perToken[i].score;
         }
-        const wholeExact = normQuery.length >= 2 && node.normName === normQuery;
-        pass1.push({ node, perToken, wholeExact });
+        const wholeExact = normQuery.length >= 2 && node.normName === normQuery && query.includes(".") === node.apiName.includes(".");
+        pass1.push({ node, perToken, wholeExact, parentMatched });
       }
       const anchorIdx = [];
       for (let i = 0; i < queryTokens.length; i += 1) {
@@ -1069,6 +1091,7 @@ var init_resolve = __esm({
       const scored = [];
       const coverageById = /* @__PURE__ */ new Map();
       const wholeExactIds = /* @__PURE__ */ new Set();
+      const parentMatchedIds = /* @__PURE__ */ new Set();
       for (const c of pass1) {
         const matched = c.perToken.filter((t) => t.score >= MATCHED_FLOOR);
         if (matched.length === 0 && !c.wholeExact)
@@ -1085,10 +1108,13 @@ var init_resolve = __esm({
         const refs = c.node.inbound;
         const score = base * typeWeight(type) * (1 + POP_K * Math.log10(1 + refs));
         const kind = c.wholeExact ? "exact" : rollupKind(matched);
-        const matchedNodeTokens = new Set(matched.map((m) => m.matchedToken));
+        const nodeTokenSet = new Set(c.node.tokens);
+        const matchedNodeTokens = new Set(matched.map((m) => m.matchedToken).filter((t) => nodeTokenSet.has(t)));
         coverageById.set(c.node.id, c.wholeExact ? 1 : matchedNodeTokens.size / c.node.tokens.length);
         if (c.wholeExact)
           wholeExactIds.add(c.node.id);
+        if (c.parentMatched)
+          parentMatchedIds.add(c.node.id);
         scored.push({
           id: c.node.id,
           type,
@@ -1110,6 +1136,10 @@ var init_resolve = __esm({
         const tierB = b.base >= EXACT_THRESHOLD ? 0 : 1;
         if (tierA !== tierB)
           return tierA - tierB;
+        const pmA = parentMatchedIds.has(a.id) ? 0 : 1;
+        const pmB = parentMatchedIds.has(b.id) ? 0 : 1;
+        if (pmA !== pmB)
+          return pmA - pmB;
         if (a.score !== b.score)
           return b.score - a.score;
         return a.id < b.id ? -1 : 1;
@@ -1121,7 +1151,7 @@ var init_resolve = __esm({
       if (top === void 0 || bestBase < NONE_THRESHOLD) {
         disposition = "none";
       } else {
-        const contenders = candidates.filter((c) => c.score >= top.score * CONTENDER_RATIO);
+        const contenders = candidates.filter((c) => c.score >= top.score * CONTENDER_RATIO || parentMatchedIds.has(c.id));
         const topCoverage = coverageById.get(top.id) ?? 0;
         disposition = top.base >= EXACT_THRESHOLD && contenders.length === 1 && topCoverage >= EXACT_COVERAGE ? "exact" : "ambiguous";
       }
@@ -1549,6 +1579,7 @@ var init_manifest = __esm({
       const coveredTypes = filtered.filter((entry) => entry.requested && !entry.errored && !entry.neverModeled).map((entry) => entry.type);
       const partialTypes = filtered.filter((entry) => entry.errored && !entry.neverModeled).map((entry) => entry.type);
       const notModeledTypes = filtered.filter((entry) => entry.neverModeled).map((entry) => entry.type);
+      const notRequestedTypes = filtered.filter((entry) => !entry.requested && !entry.neverModeled).map((entry) => entry.type);
       if (wanted !== null) {
         const knownTypes = new Set(filtered.map((entry) => entry.type));
         for (const type of wanted) {
@@ -1557,7 +1588,9 @@ var init_manifest = __esm({
           }
         }
       }
-      const missingCoverage = [.../* @__PURE__ */ new Set([...partialTypes, ...notModeledTypes])].sort();
+      const missingCoverage = [
+        .../* @__PURE__ */ new Set([...partialTypes, ...notModeledTypes, ...notRequestedTypes])
+      ].sort();
       const coverageKnown = readCoverageEntries(manifest).length > 0;
       const status = missingCoverage.length > 0 ? "partial" : coverageKnown ? "complete" : "unknown";
       return {
@@ -7615,7 +7648,7 @@ var init_explain_field = __esm({
 
 // ../mcp/dist/src/tools/explain-flow.js
 import { z as z32 } from "zod";
-var FLOW_PREFIX, DISCLOSURE2, explainFlowInputSchema, readFlowLabel, readFlowStatus, readFlowProcessType, readFlowTriggerType, findTriggerObject, collectTriggerConditions, stripObjectPrefix, collectActionCalls, prefixOf, collectRecordLookups, classifyWriteOperation, collectRecordWrites, decisionNameOf, collectDecisions, explainFlowHandler;
+var FLOW_PREFIX, DISCLOSURE2, explainFlowInputSchema, readFlowLabel, readFlowStatus, readFlowProcessType, readFlowTriggerType, findTriggerObject, collectTriggerConditions, stripObjectPrefix, collectActionCalls, prefixOf, collectRecordLookups, classifyWriteOperation, collectRecordWrites, decisionNameOf, collectDecisions, ALTERNATE_TYPE_PREFIXES, findAlternateTypeId, explainFlowHandler;
 var init_explain_flow = __esm({
   "../mcp/dist/src/tools/explain-flow.js"() {
     "use strict";
@@ -7788,6 +7821,21 @@ var init_explain_flow = __esm({
       }
       return out;
     };
+    ALTERNATE_TYPE_PREFIXES = [
+      "ApexTrigger",
+      "ApexClass",
+      "WorkflowRule",
+      "ValidationRule"
+    ];
+    findAlternateTypeId = async (ctx, bareName) => {
+      for (const prefix of ALTERNATE_TYPE_PREFIXES) {
+        const candidate = `${prefix}:${bareName}`;
+        const r = await getNodeById(ctx.graph, candidate);
+        if (r.ok && r.value !== null)
+          return candidate;
+      }
+      return null;
+    };
     explainFlowHandler = async (ctx, input2) => {
       const coercedFlowId = coercePrefix(input2.flowId, [FLOW_PREFIX]);
       if (!coercedFlowId.startsWith(FLOW_PREFIX)) {
@@ -7806,9 +7854,11 @@ var init_explain_flow = __esm({
         });
       }
       if (nodeResult.value === null) {
+        const bareName = flowId.slice(FLOW_PREFIX.length);
+        const alt = await findAlternateTypeId(ctx, bareName);
         return err({
           kind: "component-not-found",
-          message: `no Flow with id ${flowId}`,
+          message: alt ? `no Flow named '${bareName}', but '${alt}' exists \u2014 it is a ${alt.slice(0, alt.indexOf(":"))}, not a Flow. explain_flow only handles Flows; use get_component (or the matching trigger/apex tool) for '${alt}'.` : `no Flow with id ${flowId}`,
           path: flowId
         });
       }
@@ -9345,11 +9395,11 @@ var init_naming_convention = __esm({
     parseScope = (scope) => {
       if (scope === void 0 || scope === "all")
         return ok(null);
-      const match = /^CustomField:([^.]+)\.\*$/.exec(scope);
+      const match = /^CustomField:([^.]+)(?:\.\*)?$/.exec(scope);
       if (match === null) {
         return err({
           kind: "invalid-scope",
-          message: `unrecognized scope "${scope}"; expected 'all' or 'CustomField:{ObjectApiName}.*'`
+          message: `unrecognized scope "${scope}"; expected 'all', 'CustomField:{ObjectApiName}', or 'CustomField:{ObjectApiName}.*'`
         });
       }
       return ok(match[1]);
@@ -17053,7 +17103,7 @@ var init_get_edges = __esm({
     ];
     getEdgesInputSchema = z65.object({
       nodeId: z65.string().min(1),
-      direction: z65.enum(["in", "out", "both"]).optional(),
+      direction: z65.preprocess((v) => v === "incoming" ? "in" : v === "outgoing" ? "out" : v, z65.enum(["in", "out", "both"])).optional(),
       edgeType: z65.enum(EDGE_TYPES).optional(),
       confidence: z65.enum(CONFIDENCE_LEVELS).optional()
     });
@@ -18920,7 +18970,7 @@ var init_live_consent = __esm({
 import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 import { z as z73 } from "zod";
-var nodeExecFile2, redactSecrets, LIVE_PLANE_DISCLOSURE, MAX_SAMPLE_ROWS, liveEnabledSchema, isLivePlaneEnabled, liveTrust, resolveOrg, resolveLiveAccess, liveConsentRequiredError, gateLive, getLiveAuth, runSfJson, apiPath, restGet, liveDescribeInputSchema, liveDescribeHandler, liveCountInputSchema, assertCountSoql, liveCountHandler, liveSampleInputSchema, capSampleSoql, liveSampleHandler, liveFieldPopulationInputSchema, liveFieldPopulationHandler, liveOrgLimitsInputSchema, liveOrgLimitsHandler, MAX_INACTIVE_USER_ROWS, DEFAULT_INACTIVE_DAYS, MS_PER_DAY, liveInactiveUsersInputSchema, soqlDateTime, liveInactiveUsersHandler, DEFAULT_LICENSE_INACTIVE_DAYS, MAX_RECLAIM_ROWS, LICENSE_USAGE_DISCLOSURE, liveLicenseUsageInputSchema, toUtilization, renderLicenseUsageMarkdown, liveLicenseUsageHandler, liveConsentInputSchema, consentTrust, liveConsentHandler, liveQuery, MAX_DETAIL_ROWS, daysAgoSoql, daysSince, livePlaneVaultState, UNAVAILABLE_ERROR, assertSoqlIdentifier, soqlLiteral, MAX_GROUP_BUCKETS, DEFAULT_STALE_DAYS, DEFAULT_RECENT_DAYS, liveGroupCountInputSchema, liveGroupCountHandler, liveStaleRecordsInputSchema, liveStaleRecordsHandler, liveRecentActivityInputSchema, liveRecentActivityHandler, buildEqualityWhere, aggregateCountFromRow, liveAggregateInputSchema, liveAggregateHandler, MAX_DUPLICATE_GROUPS, liveDuplicateCheckInputSchema, liveDuplicateCheckHandler, MAX_OWNER_BUCKETS, liveOwnerBreakdownInputSchema, liveOwnerBreakdownHandler, DEFAULT_REPORT_STALE_DAYS, liveReportUsageInputSchema, liveReportUsageHandler, liveFolderAccessInputSchema, liveFolderAccessHandler, DEFAULT_TEMPLATE_STALE_DAYS, CLASSIC_TEMPLATE_TYPES, liveEmailTemplateUsageInputSchema, liveEmailTemplateUsageHandler, DEFAULT_HEALTH_DAYS, LIMIT_RISK_THRESHOLD, liveOrgHealthInputSchema, liveOrgHealthHandler, liveStorageByObjectInputSchema, liveStorageByObjectHandler, liveDataSkewInputSchema, liveSetupAuditTrailInputSchema, liveSecurityExposureInputSchema;
+var nodeExecFile2, redactSecrets, LIVE_PLANE_DISCLOSURE, MAX_SAMPLE_ROWS, liveEnabledSchema, isLivePlaneEnabled, liveTrust, resolveOrg, resolveLiveAccess, liveConsentRequiredError, gateLive, getLiveAuth, runSfJson, apiPath, restGet, liveDescribeInputSchema, liveDescribeHandler, liveCountInputSchema, OBJECT_API_NAME_RE, resolveCountSoql, assertCountSoql, liveCountHandler, liveSampleInputSchema, capSampleSoql, liveSampleHandler, liveFieldPopulationInputSchema, liveFieldPopulationHandler, liveOrgLimitsInputSchema, liveOrgLimitsHandler, MAX_INACTIVE_USER_ROWS, DEFAULT_INACTIVE_DAYS, MS_PER_DAY, liveInactiveUsersInputSchema, soqlDateTime, liveInactiveUsersHandler, DEFAULT_LICENSE_INACTIVE_DAYS, MAX_RECLAIM_ROWS, LICENSE_USAGE_DISCLOSURE, liveLicenseUsageInputSchema, toUtilization, renderLicenseUsageMarkdown, liveLicenseUsageHandler, liveConsentInputSchema, consentTrust, liveConsentHandler, liveQuery, MAX_DETAIL_ROWS, daysAgoSoql, daysSince, livePlaneVaultState, UNAVAILABLE_ERROR, assertSoqlIdentifier, soqlLiteral, MAX_GROUP_BUCKETS, DEFAULT_STALE_DAYS, DEFAULT_RECENT_DAYS, liveGroupCountInputSchema, liveGroupCountHandler, liveStaleRecordsInputSchema, liveStaleRecordsHandler, liveRecentActivityInputSchema, liveRecentActivityHandler, buildEqualityWhere, aggregateCountFromRow, liveAggregateInputSchema, liveAggregateHandler, MAX_DUPLICATE_GROUPS, liveDuplicateCheckInputSchema, liveDuplicateCheckHandler, MAX_OWNER_BUCKETS, liveOwnerBreakdownInputSchema, liveOwnerBreakdownHandler, DEFAULT_REPORT_STALE_DAYS, liveReportUsageInputSchema, liveReportUsageHandler, liveFolderAccessInputSchema, liveFolderAccessHandler, DEFAULT_TEMPLATE_STALE_DAYS, CLASSIC_TEMPLATE_TYPES, liveEmailTemplateUsageInputSchema, liveEmailTemplateUsageHandler, DEFAULT_HEALTH_DAYS, LIMIT_RISK_THRESHOLD, liveOrgHealthInputSchema, liveOrgHealthHandler, liveStorageByObjectInputSchema, liveStorageByObjectHandler, liveDataSkewInputSchema, liveSetupAuditTrailInputSchema, liveSecurityExposureInputSchema;
 var init_live_plane = __esm({
   "../mcp/dist/src/tools/live-plane.js"() {
     "use strict";
@@ -19037,9 +19087,33 @@ var init_live_plane = __esm({
       });
     };
     liveCountInputSchema = liveEnabledSchema.extend({
-      soql: z73.string().min(1),
+      // Either `soql` (a SELECT COUNT() query) OR `objectApiName` (count every row
+      // of that object). Both optional at the schema level; the handler requires
+      // exactly one and turns objectApiName into `SELECT COUNT() FROM <object>`.
+      soql: z73.string().min(1).optional(),
+      objectApiName: z73.string().min(1).optional(),
       orgAlias: z73.string().min(1).optional()
     });
+    OBJECT_API_NAME_RE = /^[A-Za-z][A-Za-z0-9_]*$/;
+    resolveCountSoql = (input2) => {
+      if (input2.soql !== void 0)
+        return ok(input2.soql);
+      if (input2.objectApiName !== void 0) {
+        if (!OBJECT_API_NAME_RE.test(input2.objectApiName)) {
+          return err({
+            kind: "invalid-query",
+            message: `objectApiName "${input2.objectApiName}" is not a valid Salesforce object API name.`,
+            path: "objectApiName"
+          });
+        }
+        return ok(`SELECT COUNT() FROM ${input2.objectApiName}`);
+      }
+      return err({
+        kind: "invalid-query",
+        message: "live_count needs either `soql` (a SELECT COUNT() query) or `objectApiName`.",
+        path: "soql"
+      });
+    };
     assertCountSoql = (soql) => {
       const normalized = soql.trim().replace(/\s+/g, " ");
       if (!/^select\s+count\s*\(/i.test(normalized)) {
@@ -19055,7 +19129,10 @@ var init_live_plane = __esm({
       const gate = await gateLive(ctx, input2);
       if (!gate.ok)
         return gate;
-      const soqlCheck = assertCountSoql(input2.soql);
+      const soqlResult = resolveCountSoql(input2);
+      if (!soqlResult.ok)
+        return soqlResult;
+      const soqlCheck = assertCountSoql(soqlResult.value);
       if (!soqlCheck.ok)
         return soqlCheck;
       const org = resolveOrg(ctx, input2.orgAlias);
@@ -21223,7 +21300,7 @@ var init_omniuicard_widget_breakdown = __esm({
 });
 
 // ../mcp/dist/src/tools/soe-admission.js
-var OBJECT_NOT_MODELED_BOUNDARY, evaluateSoeAdmission, composeSoeDisclosure;
+var OBJECT_NOT_MODELED_BOUNDARY, evaluateSoeAdmission, composeSoeDisclosure, soeNotAdmittedMessage;
 var init_soe_admission = __esm({
   "../mcp/dist/src/tools/soe-admission.js"() {
     "use strict";
@@ -21259,9 +21336,142 @@ var init_soe_admission = __esm({
       if (parentOf.value.length > 0) {
         return ok({ admitted: true, objectModeled: false });
       }
-      return ok({ admitted: false, objectModeled: false });
+      const inbound = await listEdges(ctx.graph, objectId, { direction: "in" });
+      if (!inbound.ok) {
+        return err(inbound.error.message);
+      }
+      return ok({
+        admitted: false,
+        objectModeled: false,
+        referencedButNotModeled: inbound.value.length > 0
+      });
     };
     composeSoeDisclosure = (baseDisclosure, objectModeled) => objectModeled ? baseDisclosure : `${baseDisclosure} ${OBJECT_NOT_MODELED_BOUNDARY}`;
+    soeNotAdmittedMessage = (objectId, referencedButNotModeled) => referencedButNotModeled ? `\`${objectId}\` is referenced by this org (e.g. permission-set grants) but its definition was never retrieved into this vault \u2014 typically a managed-package or filtered object. Save-order can't be composed without the object's own metadata and automation. Run \`sfi refresh\` if it is retrievable, otherwise treat it as external.` : `no automation or object definition for \`${objectId}\` in this vault`;
+  }
+});
+
+// ../mcp/dist/src/tools/soe-payload-bounds.js
+var SOE_MAX_PAYLOAD_BYTES, KEEP_ALL_AT_OR_BELOW, sizeOf, enforceSoeByteBudget, soeTruncationNote;
+var init_soe_payload_bounds = __esm({
+  "../mcp/dist/src/tools/soe-payload-bounds.js"() {
+    "use strict";
+    SOE_MAX_PAYLOAD_BYTES = 4e4;
+    KEEP_ALL_AT_OR_BELOW = 4;
+    sizeOf = (payload) => Buffer.byteLength(JSON.stringify(payload), "utf8");
+    enforceSoeByteBudget = (payload, containers) => {
+      if (sizeOf(payload) <= SOE_MAX_PAYLOAD_BYTES) {
+        return { truncated: false, actionsOmitted: 0, conditionalsTrimmed: 0, stepsOmitted: 0 };
+      }
+      const steps = containers.flat();
+      let totalOmitted = 0;
+      const trimTo = (step3, keep) => {
+        if (keep >= step3.actions.length)
+          return;
+        const removed = step3.actions.length - keep;
+        step3.actions = step3.actions.slice(0, keep);
+        step3.actionsOmitted = (step3.actionsOmitted ?? 0) + removed;
+        totalOmitted += removed;
+      };
+      const actionBytes = steps.reduce((n, s) => n + Buffer.byteLength(JSON.stringify(s.actions), "utf8"), 0);
+      const nonActionBytes = Math.max(0, sizeOf(payload) - actionBytes);
+      const budgetForActions = SOE_MAX_PAYLOAD_BYTES - nonActionBytes;
+      if (budgetForActions <= 0) {
+        for (const s of steps)
+          trimTo(s, 0);
+      } else if (actionBytes > budgetForActions) {
+        const ratio = budgetForActions / actionBytes;
+        for (const s of steps) {
+          if (s.actions.length <= KEEP_ALL_AT_OR_BELOW)
+            continue;
+          trimTo(s, Math.max(0, Math.floor(s.actions.length * ratio)));
+        }
+      }
+      for (let guard = 0; guard < 1e5; guard += 1) {
+        if (sizeOf(payload) <= SOE_MAX_PAYLOAD_BYTES)
+          break;
+        let target;
+        for (const s of steps) {
+          if (s.actions.length <= KEEP_ALL_AT_OR_BELOW)
+            continue;
+          if (target === void 0 || s.actions.length > target.actions.length) {
+            target = s;
+          }
+        }
+        if (target === void 0)
+          break;
+        trimTo(target, Math.floor(target.actions.length / 2));
+      }
+      let conditionalsTrimmed = 0;
+      for (let guard = 0; guard < 1e5; guard += 1) {
+        if (sizeOf(payload) <= SOE_MAX_PAYLOAD_BYTES)
+          break;
+        let target;
+        let targetBytes = 0;
+        for (const s of steps) {
+          const cond = s.conditional;
+          if (cond === void 0 || s.conditionalTruncated)
+            continue;
+          if (cond.expression === "" && cond.fieldRefs.length === 0)
+            continue;
+          const b = Buffer.byteLength(JSON.stringify(cond), "utf8");
+          if (target === void 0 || b > targetBytes) {
+            target = s;
+            targetBytes = b;
+          }
+        }
+        if (target === void 0)
+          break;
+        target.conditional = {
+          conditionContextId: target.conditional.conditionContextId,
+          expression: "",
+          fieldRefs: []
+        };
+        target.conditionalTruncated = true;
+        conditionalsTrimmed += 1;
+      }
+      let stepsOmitted = 0;
+      for (let guard = 0; guard < 1e6; guard += 1) {
+        if (sizeOf(payload) <= SOE_MAX_PAYLOAD_BYTES)
+          break;
+        let target;
+        let targetBytes = 0;
+        for (const c of containers) {
+          if (c.length <= 1)
+            continue;
+          const b = Buffer.byteLength(JSON.stringify(c), "utf8");
+          if (target === void 0 || b > targetBytes) {
+            target = c;
+            targetBytes = b;
+          }
+        }
+        if (target === void 0)
+          break;
+        target.pop();
+        stepsOmitted += 1;
+      }
+      return {
+        truncated: totalOmitted > 0 || conditionalsTrimmed > 0 || stepsOmitted > 0,
+        actionsOmitted: totalOmitted,
+        conditionalsTrimmed,
+        stepsOmitted
+      };
+    };
+    soeTruncationNote = (result) => {
+      const budgetKb = Math.round(SOE_MAX_PAYLOAD_BYTES / 1e3);
+      const parts = [];
+      if (result.actionsOmitted > 0) {
+        parts.push(`${result.actionsOmitted} per-step action edge(s) across the heaviest steps were omitted (see each step's \`actionsOmitted\`)`);
+      }
+      if (result.conditionalsTrimmed > 0) {
+        parts.push(`${result.conditionalsTrimmed} step condition(s) had their expression/fieldRefs dropped \u2014 the \`conditionContextId\` remains, fetch it with \`get_component\` for the full condition (see each step's \`conditionalTruncated\`)`);
+      }
+      if (result.stepsOmitted > 0) {
+        parts.push(`${result.stepsOmitted} trailing step(s) were dropped to fit (the tail-most async/post-save steps; \`summary.totalSteps\` still reports the true total) \u2014 query a single event with \`what_happens_on_save\` to see them all`);
+      }
+      const lead = result.stepsOmitted > 0 ? `Response trimmed to fit the ~${budgetKb} KB MCP response budget` : `Response trimmed to fit the ~${budgetKb} KB MCP response budget: every save-order STEP is present and in order, but`;
+      return `${lead} ${parts.join("; ")}. Query a single object/event for full detail.`;
+    };
   }
 });
 
@@ -21274,6 +21484,7 @@ var init_order_of_execution = __esm({
     init_dist();
     init_src();
     init_soe_admission();
+    init_soe_payload_bounds();
     DISCLOSURE6 = "v2.0e composes the documented Salesforce order-of-execution instantiated against THIS org's extracted automation. Conditions ARE listed but NOT EVALUATED \u2014 the tool does not know whether this particular record satisfies them at runtime. Manual sharing, sharing sets, account teams, and Apex callouts after save are out of scope.";
     SOE_EVENTS = ["insert", "update", "delete", "undelete"];
     orderOfExecutionInputSchema = z82.object({
@@ -21603,7 +21814,7 @@ var init_order_of_execution = __esm({
       if (!admission.value.admitted) {
         return err({
           kind: "component-not-found",
-          message: `no automation or object definition for \`${objectId}\` in this vault`,
+          message: soeNotAdmittedMessage(objectId, admission.value.referencedButNotModeled ?? false),
           path: objectId
         });
       }
@@ -21621,13 +21832,20 @@ var init_order_of_execution = __esm({
         }
         byEvent[event] = perEventResult.value;
       }
+      const data = {
+        objectApiName: input2.objectApiName,
+        objectModeled,
+        byEvent,
+        disclosure: composeSoeDisclosure(DISCLOSURE6, objectModeled)
+      };
+      const containers = SOE_EVENTS.map((event) => byEvent[event].soe);
+      const budget = enforceSoeByteBudget(data, containers);
+      if (budget.truncated) {
+        data.truncated = true;
+        data.disclosure = `${data.disclosure} ${soeTruncationNote(budget)}`;
+      }
       return ok({
-        data: {
-          objectApiName: input2.objectApiName,
-          objectModeled,
-          byEvent,
-          disclosure: composeSoeDisclosure(DISCLOSURE6, objectModeled)
-        },
+        data,
         vaultState: {
           sourceTreeHash: ctx.manifest.sourceTreeHash,
           refreshedAt: ctx.manifest.refreshedAt
@@ -22755,7 +22973,9 @@ var init_intent_router = __esm({
           /\bwho\s+can\s+(see|read|view|edit|access)\b\s+[\w\s.]+[?.!]?$/,
           /\b(access|permission|fls|field[-\s]level\s+security)\b.*\b(field|object)\b/,
           /\bwho\s+has\s+access\s+to\b/,
-          /\bwhich\s+(profiles?|permission\s+sets?)\b.*\b(grant|access|see|edit)\b/
+          // "allow|read|view" added: "which permission sets allow read on X" was a
+          // router gap (the verbs grant/access/see/edit didn't cover it).
+          /\bwhich\s+(profiles?|permission\s+sets?)\b.*\b(grant|allow|access|see|read|view|edit)\b/
         ]
       },
       {
@@ -22880,11 +23100,15 @@ var init_intent_router = __esm({
         tools: ["sfi.resolve", "sfi.what_happens_on_save", "sfi.order_of_execution"],
         liveRequired: false,
         needsResolve: true,
-        reason: "Order of execution / what runs on save is reconstructed from the vault graph.",
+        reason: "Order of execution / what runs on save is reconstructed from the vault graph. what_happens_on_save needs an explicit DML event \u2014 default to 'update' (or insert/delete to match the question) when none is stated.",
         patterns: [
           /\b(trigger\s+order|order\s+of\s+execution)\b/,
           /\bwhat\s+(happens|runs|fires)\b.*\b(on\s+save|when\b.*\b(created|saved|updated|inserted|deleted))\b/,
-          /\bwhat\s+(triggers?|automation|flows?)\b.*\b(fire|run)\b/
+          // "which/what flows|triggers|VRs|workflows run|fire when ..." — the
+          // "which" phrasing was a router gap (e.g. "which flows run when a Case is
+          // created"), so the question fell through to unrouted.
+          /\b(what|which)\s+(triggers?|automation|flows?|validation\s+rules?|workflows?)\b.*\b(fire|run|execute|happen)\b/,
+          /\b(flows?|triggers?|automation)\b.*\bwhen\b.*\b\w+\s+is\b.*\b(created|updated|inserted|deleted|saved)\b/
         ]
       },
       {
@@ -26078,6 +26302,7 @@ var init_what_happens_on_save = __esm({
     init_dist();
     init_src();
     init_soe_admission();
+    init_soe_payload_bounds();
     DISCLOSURE7 = "v2.0e composes the documented Salesforce order-of-execution instantiated against THIS org's extracted automation. Conditions ARE listed but NOT EVALUATED \u2014 the tool does not know whether this particular record satisfies them at runtime. Manual sharing, sharing sets, account teams, and Apex callouts after save are out of scope.";
     ALLOWED_EVENTS = [
       "insert",
@@ -26088,7 +26313,10 @@ var init_what_happens_on_save = __esm({
     ];
     whatHappensOnSaveInputSchema = z103.object({
       objectApiName: z103.string().min(1),
-      event: z103.enum(ALLOWED_EVENTS),
+      // Accept "after update" / "Before Insert" etc.: lower-case and drop the
+      // before/after timing prefix so the bare DML event matches the enum. The
+      // SOE walker models both timings internally; the event arg selects the row.
+      event: z103.preprocess((v) => typeof v === "string" ? v.trim().toLowerCase().replace(/^(?:before|after)\s+/, "") : v, z103.enum(ALLOWED_EVENTS)),
       recordTypeId: z103.string().min(1).optional()
     });
     workflowMatchesEvent2 = (triggerType, event) => {
@@ -26307,7 +26535,7 @@ var init_what_happens_on_save = __esm({
       if (!admission.value.admitted) {
         return err({
           kind: "component-not-found",
-          message: `no automation or object definition for \`${objectId}\` in this vault`,
+          message: soeNotAdmittedMessage(objectId, admission.value.referencedButNotModeled ?? false),
           path: objectId
         });
       }
@@ -26444,20 +26672,26 @@ var init_what_happens_on_save = __esm({
       const asyncFanOut = asyncStepsResult.value.length;
       stepIndex += asyncFanOut;
       const conditionalCount = soe.filter((s) => s.conditional !== void 0).length;
-      return ok({
-        data: {
-          objectApiName: input2.objectApiName,
-          event: input2.event,
-          recordTypeId: input2.recordTypeId ?? null,
-          objectModeled,
-          soe,
-          summary: {
-            totalSteps: soe.length,
-            conditionalSteps: conditionalCount,
-            asyncFanOut
-          },
-          disclosure: composeSoeDisclosure(DISCLOSURE7, objectModeled)
+      const data = {
+        objectApiName: input2.objectApiName,
+        event: input2.event,
+        recordTypeId: input2.recordTypeId ?? null,
+        objectModeled,
+        soe,
+        summary: {
+          totalSteps: soe.length,
+          conditionalSteps: conditionalCount,
+          asyncFanOut
         },
+        disclosure: composeSoeDisclosure(DISCLOSURE7, objectModeled)
+      };
+      const budget = enforceSoeByteBudget(data, [soe]);
+      if (budget.truncated) {
+        data.truncated = true;
+        data.disclosure = `${data.disclosure} ${soeTruncationNote(budget)}`;
+      }
+      return ok({
+        data,
         vaultState: {
           sourceTreeHash: ctx.manifest.sourceTreeHash,
           refreshedAt: ctx.manifest.refreshedAt
@@ -26467,6 +26701,23 @@ var init_what_happens_on_save = __esm({
   }
 });
 
+// ../mcp/dist/src/tools/phantom-node.js
+var phantomAwareNotFoundMessage;
+var init_phantom_node = __esm({
+  "../mcp/dist/src/tools/phantom-node.js"() {
+    "use strict";
+    init_src();
+    phantomAwareNotFoundMessage = async (ctx, id, kindLabel) => {
+      const inbound = await listEdges(ctx.graph, id, { direction: "in" });
+      const refs = inbound.ok ? inbound.value.length : 0;
+      if (refs === 0) {
+        return `no ${kindLabel} with id ${id}`;
+      }
+      return `\`${id}\` is referenced by ${refs} other component(s) in this org (e.g. code, tests, or permission grants) but its own ${kindLabel} definition was never retrieved into the vault \u2014 typically a managed-package component or one outside the retrieve scope. Run \`sfi refresh\` if it should be retrievable; otherwise treat it as external.`;
+    };
+  }
+});
+
 // ../mcp/dist/src/tools/what-if-change-method-signature.js
 import { z as z104 } from "zod";
 var APEX_CLASS_PREFIX9, DISCLOSURE8, whatIfChangeMethodSignatureInputSchema, readMethodName, isTestClass8, buildExplanation2, classifyCaller, aggregateVerdict4, compareImpacts, compareIds, collectCallers, collectCoveringTests, whatIfChangeMethodSignatureHandler;
@@ -26477,6 +26728,7 @@ var init_what_if_change_method_signature = __esm({
     init_src();
     init_coerce_id();
     init_coverage_trust();
+    init_phantom_node();
     APEX_CLASS_PREFIX9 = "ApexClass:";
     DISCLOSURE8 = "callers identified via the v1.4 apex-scanner are at heuristic confidence; dynamic dispatch via Type.forName + invoke is invisible. Test classes are identified by @isTest + naming convention (className + 'Test' suffix) and by coversTest edges; a test class that doesn't follow the naming convention and doesn't carry a @TestVisible-tagged covering reference may be missed.";
     whatIfChangeMethodSignatureInputSchema = z104.object({
@@ -26616,7 +26868,7 @@ var init_what_if_change_method_signature = __esm({
       if (nodeResult.value === null) {
         return err({
           kind: "component-not-found",
-          message: `no ApexClass with id ${classId}`,
+          message: await phantomAwareNotFoundMessage(ctx, classId, "ApexClass"),
           path: classId
         });
       }
@@ -28731,7 +28983,8 @@ var init_tools = __esm({
       type: "object",
       properties: {
         nodeId: { type: "string", minLength: 1 },
-        direction: { type: "string", enum: ["in", "out", "both"] },
+        // 'incoming'/'outgoing' are accepted aliases (normalized to in/out).
+        direction: { type: "string", enum: ["in", "out", "both", "incoming", "outgoing"] },
         edgeType: {
           type: "string",
           // Single-sourced from the contracts EDGE_TYPES tuple so the advertised
@@ -28914,9 +29167,12 @@ var init_tools = __esm({
     });
     LIVE_COUNT_INPUT_SCHEMA = Object.freeze({
       type: "object",
-      required: ["soql"],
+      // Either `soql` (a SELECT COUNT() query) or `objectApiName` (count all rows).
+      // The one-of requirement is enforced in the handler, not the JSON schema, so
+      // the advertised shape stays simple for clients.
       properties: {
         soql: { type: "string", minLength: 1 },
+        objectApiName: { type: "string", minLength: 1 },
         ...LIVE_ENABLED_PROPERTY
       }
     });
@@ -30195,7 +30451,7 @@ var init_tools = __esm({
       },
       {
         name: "sfi.live_count",
-        description: "Opt-in live org: run a SELECT COUNT() SOQL query with strict shape validation. Read-only; never falls back to vault data.",
+        description: "Opt-in live org: count records. Pass `objectApiName` to count every row of an object, or `soql` for a custom SELECT COUNT() query (strict shape validation). Read-only; never falls back to vault data.",
         inputSchema: LIVE_COUNT_INPUT_SCHEMA
       },
       {
@@ -31521,15 +31777,40 @@ var runDoctor = async (opts) => {
   const checks = [];
   const vaultRoot = resolve4(opts.cwd, DEFAULT_VAULT_ROOT);
   const paths = vaultPaths(vaultRoot);
+  const SF_FALLBACK_PATHS = ["/usr/local/bin/sf", "/opt/homebrew/bin/sf"];
+  let sfBin = "sf";
+  let sfDetail = null;
+  let sfOnPath = false;
   try {
     const { stdout } = await run("sf --version");
-    checks.push({ name: "Salesforce CLI", status: "pass", detail: stdout.trim().split("\n")[0] ?? "installed" });
+    sfDetail = stdout.trim().split("\n")[0] ?? "installed";
+    sfOnPath = true;
   } catch {
+    for (const abs of SF_FALLBACK_PATHS) {
+      try {
+        const { stdout } = await run(`"${abs}" --version`);
+        sfDetail = stdout.trim().split("\n")[0] ?? "installed";
+        sfBin = `"${abs}"`;
+        break;
+      } catch {
+      }
+    }
+  }
+  if (sfOnPath) {
+    checks.push({ name: "Salesforce CLI", status: "pass", detail: sfDetail ?? "installed" });
+  } else if (sfDetail !== null) {
+    checks.push({
+      name: "Salesforce CLI",
+      status: "warn",
+      detail: `${sfDetail} \u2014 found via absolute path, not on PATH`,
+      fix: "Add the Salesforce CLI directory (e.g. /usr/local/bin or /opt/homebrew/bin) to the PATH of whatever launches sfi; IDE/MCP subprocesses often do not inherit it."
+    });
+  } else {
     checks.push({
       name: "Salesforce CLI",
       status: "fail",
-      detail: "`sf` not found on PATH",
-      fix: "Install the Salesforce CLI: npm install --global @salesforce/cli"
+      detail: "`sf` not found on PATH or common install locations",
+      fix: "Install the Salesforce CLI (npm install --global @salesforce/cli). If it IS installed, add its directory (/usr/local/bin or /opt/homebrew/bin) to your PATH; IDE/MCP subprocesses often do not inherit it."
     });
   }
   const vaultInit = await pathExists2(paths.config);
@@ -31553,7 +31834,7 @@ var runDoctor = async (opts) => {
     });
   } else {
     try {
-      const { stdout } = await run(`sf org display --target-org "${targetOrg}" --json`);
+      const { stdout } = await run(`${sfBin} org display --target-org "${targetOrg}" --json`);
       const parsed = JSON.parse(stdout);
       const status = parsed.result?.connectedStatus;
       if (status === "Connected") {
@@ -35729,8 +36010,8 @@ import { XMLParser as XMLParser19, XMLValidator as XMLValidator18 } from "fast-x
 var APPLICATION_FILE_SUFFIX = ".app-meta.xml";
 var ROOT_ELEMENT18 = "CustomApplication";
 var EXTRACTOR_SOURCE8 = "custom-application-extractor";
-var REQUIRED_ELEMENTS4 = ["label", "navType"];
-var ALLOWED_NAV_TYPE = ["Standard", "Console"];
+var REQUIRED_ELEMENTS4 = ["label"];
+var ALLOWED_NAV_TYPE = ["Standard", "Console", "Classic"];
 var unwrapSingle19 = (value) => Array.isArray(value) ? value[0] : value;
 var toArray12 = (value) => {
   if (value === void 0 || value === null)
@@ -35779,6 +36060,8 @@ var validateRoot10 = (parsed, path) => {
     if (rootObj["navType"] === void 0)
       rootObj["navType"] = "Standard";
   }
+  if (rootObj["navType"] === void 0)
+    rootObj["navType"] = "Classic";
   for (const required of REQUIRED_ELEMENTS4) {
     if (rootObj[required] === void 0) {
       return err({
@@ -35903,6 +36186,24 @@ var ROOT_ELEMENT19 = "CustomField";
 var FIELDS_DIR_NAME = "fields";
 var PICKLIST_TYPES3 = ["Picklist", "MultiselectPicklist"];
 var FORMULA_ELEMENT_NAME = "formula";
+var STANDARD_FIELD_TYPES = {
+  Email: "Email",
+  Phone: "Phone",
+  Fax: "Phone",
+  MobilePhone: "Phone",
+  HomePhone: "Phone",
+  OtherPhone: "Phone",
+  AssistantPhone: "Phone",
+  Website: "Url",
+  CreatedDate: "DateTime",
+  LastModifiedDate: "DateTime",
+  SystemModstamp: "DateTime",
+  LastViewedDate: "DateTime",
+  LastReferencedDate: "DateTime",
+  LastActivityDate: "Date",
+  Birthdate: "Date",
+  IsDeleted: "Checkbox"
+};
 var unwrapSingle20 = (value) => Array.isArray(value) ? value[0] : value;
 var coerceBoolean12 = (value) => {
   if (typeof value === "boolean")
@@ -35976,7 +36277,8 @@ var validateRoot11 = (parsed, path) => {
         message: "missing required element: <type>"
       });
     }
-    rootObj["type"] = "Unknown";
+    const bareName = fullName.includes(".") ? fullName.split(".").pop() : fullName;
+    rootObj["type"] = STANDARD_FIELD_TYPES[bareName] ?? "Unknown";
   }
   return ok(rootObj);
 };
@@ -42326,6 +42628,7 @@ var QUICK_ACTIONS_DIR_NAME = "quickActions";
 var REQUIRED_ELEMENTS20 = ["type"];
 var ALLOWED_ACTION_TYPES = [
   "Create",
+  "Flow",
   "LogACall",
   "LightningComponent",
   "LightningWebComponent",
@@ -42465,6 +42768,19 @@ var buildReferencesEdge = (fromId, actionType, rootObj) => {
       properties: { targetKind: "page" }
     };
   }
+  if (actionType === "Flow") {
+    const name = optionalString23(rootObj, "flowDefinition");
+    if (name === null || name.length === 0)
+      return null;
+    return {
+      fromId,
+      toId: `Flow:${name}`,
+      edgeType: "references",
+      confidence: "declared",
+      source: EXTRACTOR_SOURCE25,
+      properties: { targetKind: "flow" }
+    };
+  }
   return null;
 };
 var extractQuickAction = async (path) => {
@@ -42529,6 +42845,7 @@ var extractQuickAction = async (path) => {
       lightningComponent: optionalString23(rootObj, "lightningComponent"),
       lightningWebComponent: optionalString23(rootObj, "lightningWebComponent"),
       page: optionalString23(rootObj, "page"),
+      flowDefinition: optionalString23(rootObj, "flowDefinition"),
       icon: optionalString23(rootObj, "icon"),
       height: optionalInteger2(rootObj, "height"),
       width: optionalString23(rootObj, "width")
@@ -45879,12 +46196,17 @@ var runRefresh = async (opts) => {
   const paths = vaultPaths(configResult.value.vaultRoot);
   const targetOrg = opts.targetOrg ?? configResult.value.targetOrg;
   const requestedTypes = parseTypeFilter(opts.types);
+  const progress = opts.onProgress ?? (() => {
+  });
   if (!opts.noPull) {
+    progress(`Retrieving metadata from ${targetOrg} (this can take several minutes)...`);
     const pulled = await runSfRetrieve(targetOrg, paths.source, requestedTypes);
     if (!pulled.ok)
       return failed(started, pulled.error, []);
   }
+  progress("Extracting components from retrieved source...");
   const walked = await walkAndExtract(paths.source, requestedTypes);
+  progress(`Extracted ${walked.results.length} component file(s); building graph...`);
   await mkdir9(paths.graph, { recursive: true });
   const storeResult = await openGraph(paths.graphDb);
   if (!storeResult.ok) {
@@ -45953,10 +46275,13 @@ var buildCoverageEntries2 = (counts, skippedDirectories, requestedTypes, sourceR
 };
 var runWithOpenGraph = async (args) => {
   const { store, paths, started, targetOrg, walked, opts, requestedTypes } = args;
+  const progress = opts.onProgress ?? (() => {
+  });
   const importResult = await importExtractionResults(store, walked.results);
   if (!importResult.ok) {
     return failed(started, `importExtractionResults: ${importResult.error.message}`, walked.failures, EMPTY_COUNTS, walked.skippedDirectories);
   }
+  progress("Rendering Markdown vault...");
   let counts;
   try {
     counts = await renderVault(store, paths.root);
@@ -46173,7 +46498,14 @@ var loadVaultConfig = async (cwd) => {
 };
 var METADATA_API_NAME = {
   VisualforcePage: "ApexPage",
-  VisualforceComponent: "ApexComponent"
+  VisualforceComponent: "ApexComponent",
+  // Sharing rules are exposed by the org as the aggregate type `SharingRules`
+  // (one file per object, e.g. `Account.sharingRules-meta.xml`).
+  SharingRule: "SharingRules",
+  // Custom-metadata *records* (the rows of a `__mdt` type) are retrieved under
+  // the `CustomMetadata` type as `{Type}.{Record}.md-meta.xml` files. The
+  // `__mdt` type definitions themselves come down separately as CustomObject.
+  CustomMetadataRecord: "CustomMetadata"
 };
 var toApiName = (type) => METADATA_API_NAME[type] ?? type;
 var SF_MAX_BUFFER = 256 * 1024 * 1024;
@@ -46242,7 +46574,8 @@ var runSfRetrieve = async (targetOrg, sourceDir, requestedTypes) => {
   }
   const { included: manifestTypes, dropped } = selectManifestTypes(requestedTypes, orgTypes);
   if (dropped.length > 0) {
-    process.stdout.write(`Skipping ${dropped.length} metadata type(s) not present in ${targetOrg}: ${dropped.join(", ")}
+    const labelled = dropped.map((type) => toApiName(type) === type ? type : `${type} (${toApiName(type)})`).join(", ");
+    process.stdout.write(`Skipping ${dropped.length} metadata type(s) the ${targetOrg} describe does not expose: ${labelled}
 `);
   }
   if (manifestTypes.length === 0) {
@@ -46344,7 +46677,11 @@ var registerRefreshCommand = (program) => {
       noPull: flags.pull === false,
       ...flags.targetOrg !== void 0 ? { targetOrg: flags.targetOrg } : {},
       ...flags.types !== void 0 ? { types: flags.types } : {},
-      ...flags.withToolingApi === true ? { withToolingApi: true } : {}
+      ...flags.withToolingApi === true ? { withToolingApi: true } : {},
+      // Progress goes to stderr so a multi-minute refresh isn't a silent
+      // wait; stdout stays reserved for the final summary.
+      onProgress: (message) => process.stderr.write(`${message}
+`)
     });
     process.stdout.write(formatRefreshSummary(result));
     if (result.status !== "success")
@@ -46503,7 +46840,7 @@ var registerStatusCommand = (program) => {
 // dist/src/program.js
 var readVersion = () => {
   if (true)
-    return "0.1.0";
+    return "0.1.4";
   const pkgUrl = new URL("../../package.json", import.meta.url);
   const raw = readFileSync2(fileURLToPath(pkgUrl), "utf8");
   const parsed = JSON.parse(raw);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sf-intelligence",
-  "version": "0.1.0",
+  "version": "0.1.4",
   "description": "Offline-first, MCP-first knowledge base for a Salesforce org. Ask about your org's metadata, dependencies, permissions, and automation — grounded in real retrieved metadata. Ships the sfi CLI and an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/PranavNagrecha/Salesforce-Intelligence",
@@ -52,15 +52,15 @@
   "devDependencies": {
     "esbuild": "^0.28.0",
     "vitest": "^1.6.0",
-    "@sf-intelligence/contracts": "0.1.0",
-    "@sf-intelligence/core": "0.1.0",
     "@sf-intelligence/extractors": "0.1.0",
     "@sf-intelligence/graph": "0.1.0",
-    "@sf-intelligence/mcp": "0.1.0",
     "@sf-intelligence/patterns": "0.1.0",
+    "@sf-intelligence/core": "0.1.0",
+    "@sf-intelligence/vault": "0.1.0",
+    "@sf-intelligence/contracts": "0.1.0",
+    "@sf-intelligence/mcp": "0.1.0",
     "@sf-intelligence/renderers": "0.1.0",
-    "@sf-intelligence/tooling-api": "0.1.0",
-    "@sf-intelligence/vault": "0.1.0"
+    "@sf-intelligence/tooling-api": "0.1.0"
   },
   "scripts": {
     "build": "tsc --build && node build.mjs",