Run the full Agentforce Capability Scan (26 SAST rules across 9 categories) against the current project. Returns SARIF-structured violations covering action configuration, agent script safety, grounding security, structural dependencies, flow/prompt template security, supply chain, agentic architecture, instruction integrity, and operational reliability.

Scan a specific Agentforce metadata file for capability violations. Supports .genAiFunction-meta.xml, .genAiPlugin-meta.xml, .genAiPlannerBundle-meta.xml, .genAiPromptTemplate-meta.xml, .agent files, .cls (Apex), .trigger, and schema.json files.

Run a single Agentforce SAST rule against the project. Useful for focused analysis. Rule IDs follow the pattern AGENTFORCE-X.Y (e.g., AGENTFORCE-1.1 for Mandatory User Confirmation).

List all 26 Agentforce Capability Scanner rules with their ID, name, category, severity, and description. Use this to understand the full scope of the security scan.

Get detailed information about a specific Agentforce SAST rule including its description, severity, and remediation guidance.

Given a SARIF violation from a scan, provide root-cause analysis and step-by-step remediation guidance. Pass the full violation object or just the ruleId and file path.

Given a specific Agentforce violation (rule ID + file), generate a suggested metadata or code fix. Returns a diff-style suggestion.

Execute Apex tests locally using the high-fidelity Go interpreter. Returns structured test results with pass/fail status, assertion details, stack traces, and line-level code coverage.

Extract code coverage data from the most recent test run. Shows covered/uncovered lines per class.

Aggregate and analyze the inferred schema from all Apex classes in the project. Returns SObject definitions, field usage heatmaps, and relationship graphs. Useful for understanding the data model without an org connection.

Predict merge conflicts between two branches by analyzing Apex class changes, DML patterns, and metadata dependencies. Helps prevent deployment failures.

Generate a SARIF (Static Analysis Results Interchange Format) report from the Agentforce Capability Scan. SARIF is the standard format for GitHub Security tab, Azure DevOps, and other CI/CD integrations.

Convert Agentforce scan violations into Agentforce DX test specifications (YAML format) compatible with sf agent test run and the Salesforce Testing Center. Delegates to the core SquireX CLI generate-tests command. If no SARIF file is provided, runs a fresh scan first.

Validate a generated Agentforce DX test spec without executing it. Delegates to squirex generate-tests --validate. Requires Salesforce CLI with Agentforce DX support.

Push an Agentforce DX test spec to the Salesforce Testing Center. Delegates to squirex generate-tests --push --target-org <org>. Requires an authenticated Salesforce org with sf org login and the Agentforce DX plugin.

Get the status and results of a previously submitted Agentforce Test Run from the Testing Center. Requires an authenticated Salesforce org.