Salesforce hub — family 2, Salesforce DX and deployment, plus family 1 gap fill (2026-10-22)

Family 2 adds DX projects and source format, the Agentforce metadata types and how they reference each other, deploy and retrieve with test levels and quick deploy, the deploy error catalogue, and a GitHub Actions pattern with JWT. The family 1 gap fill adds External Client Apps as source, Salesforce's own OAuth cause text, and Data 360 in sandboxes.

markdownreferencev1ESWS-CMBZarea: changelogchangelogrelease notesSalesforce DX familyfamily 1 gap fill

Created 23 Oct 2026 · Modified 23 Oct 2026 · 1 version

Salesforce hub — family 2, Salesforce DX and deployment (2026-10-22)

Family 1 gap fill

  • reference/auth/external-client-app-as-source.md: the three ECA files Salesforce's own CLI generator writes, which settings stay in Setup, and how to retrieve the rest. All three files convert cleanly with sf project convert source.
  • reference/auth/oauth-and-session-errors.md: Salesforce's own cause text per OAuth code. For example, client credentials sent to the wrong host gets "the request isn't supported for the host domain".
  • reference/orgs/orgs-and-editions.md: Data 360 in sandboxes (connections are copied inactive), and Winter '27 = API 68.0, marked Latest.

Family 2

  • reference/dx/projects-and-source-format.md
  • reference/dx/deploy-retrieve-and-tests.md
  • reference/dx/deploy-errors.md
  • reference/dx/agentforce-metadata-types.md
  • patterns/github-actions-deploy-with-jwt.md

2026 changes captured

  • sf project generate --template agent scaffolds an Agentforce DX project: an Agent Script authoring bundle, Apex and flow actions, a prompt template, permission sets and groups.
  • Agent Script calls topics subagents.
  • sf project retrieve start --root-type-with-dependencies Bot retrieves an agent with everything it depends on.
  • RunRelevantTests (beta) joins the deploy test levels.
  • The CLI (2.155.7) still generates sourceApiVersion 67.0, although Winter '27 is 68.0.

Found while building

  • The CLI's own help example for --root-type-with-dependencies uses one dash (-root-type-with-dependencies).
  • Where an Agent Script agent's default_agent_user goes:
  • the CLI's help and Salesforce's agent template put it in the config block;
  • the Agentforce DX troubleshooting page says the access block.

This is for family 3 to settle.

How it was checked

Sources:

  • Salesforce CLI 2.155.7 help.
  • plugin-deploy-retrieve and source-deploy-retrieve messages, at pinned commits.
  • Coral Cloud and the salesforcedx-templates agent template.
  • The Agentforce DX troubleshooting page.

Checks:

  • Every sf command and flag swept against the CLI's help.
  • Metadata XML converted offline.

Still missing

Unlocked and managed packaging (2GP), destructive changes manifests, scratch org snapshots, and the org shapes behind them.

Read this document as markdown — the same bytes an agent receives.