Devops.
All posts.
Standard Volume Platform Events Retire on 15 December 2026: Two Migration Paths, and Only One Lets You Phase It
Standard volume platform events retire on 15 December 2026. The Setup button migrates everything at once. A Metadata API route does them one at a time.
OmniStudio Clean Metadata Deployment: Components Finally Deploy Like Normal Metadata
Winter '27 lets OmniStudio components deploy through sf CLI, change sets and packages like any other metadata. The catch is which runtime you are on now.
Migrating Connected Apps to External Client Apps: The Tool Now Covers Packaged and Distributed Apps
Connected apps end in Summer '27. The migration tool now covers packaged and distributed apps, and keeps existing tokens and sessions valid through it.
Team Topologies for Salesforce: The Org Is the Fracture Plane
Team Topologies assumes fracture planes a single Salesforce org does not have. What transfers, what inverts across a multi-org landscape, and why it matters.
Deployable Permission Sets for a Salesforce Delivery Team: Metadata, the CI User, and OmniStudio
Permission set XML you can deploy, how to get the right permission API names out of your own org, and how to scope the CI user and OmniStudio builder roles.
Sizing a Salesforce Access Model: Team Shape, Internal vs External Admins, and What It Costs to Run
A full access model is not always the right one. How to size it to your team, flex it for external delivery partners, and what the whole thing costs to run.
A Least-Privilege Access Model for the Salesforce Delivery Team: Tiers, Roles, and Where the Escalation Chain Breaks
How to tier sandboxes, layer profiles and permission set groups, and use the one fact that stops a developer escalating from a sandbox into your production org.
Audit Your Agentforce Footprint: Every Agent, Agent User, and Permission in One Pass
Inventory every Agentforce agent, agent user, and permission with sf CLI and SOQL: the exact queries to see what your agents can touch, and from where.
Free Salesforce Event Monitoring: Build a Security Baseline from EventLogFile Without Shield
Salesforce gives Enterprise, Unlimited and Performance orgs free EventLogFile logs, but only for a day. How to capture them into a baseline without Shield.
Fixing 'Could Not Infer a Metadata Type' in the Salesforce CLI
The Salesforce CLI error 'Could not infer a metadata type' has one message and several causes. A decision tree to find which one you hit, and the fix for each.
Salesforce Attack Chain Detection: When Five Medium Findings Are One Critical Problem
Isolated Salesforce security findings look survivable. Attack chain detection correlates them into named multi-step scenarios, each mapped to real controls.
Org-Dependent Packages: How to Edit in a Sandbox, Pull Changes, and Create a Merge Request
The complete workflow for org-dependent Salesforce packages: make changes in a sandbox, retrieve them with sf CLI, commit to git, and open a merge request. Step by step.
Connecting sf CLI to Your Salesforce Org: sf org login web Complete Guide
How to connect sf CLI to your Salesforce org using sf org login web. Covers sandbox vs production login, org aliases, and verifying your connection.
Catch Salesforce Security Gaps in One Command
Most Salesforce orgs are carrying security debt they don't know about. This plugin surfaces it in a single command.
Salesforce Org-to-Org Data Migration: Complete Guide with Tools and Best Practices
Learn how to migrate data between Salesforce organizations with proven strategies, tool recommendations, and code solutions. Complete guide covering relationships, attachments, and migration order.
Apache Tomcat Valves, Custom Valve
Learn how to implement and configure custom Apache Tomcat Valves to insert logic into the request processing pipeline before your application code runs.