v0.2.0 — capability expansion + correctness hardening

sf-intelligence 0.2.0 — the biggest release since 0.1, focused on new capability breadth, correctness, and protocol modernization. Offline, read-only, MCP-first knowledge base for one Salesforce org.

Added — 24 new tools (176 → 196 advertised)

• Agentforce / AI exposure audit (GenAI + Bot extraction), guest + Experience Cloud exposure modeling
• review_change PR gate — cross-vault diff with SARIF output + a reusable GitHub Action
• query_graph power-user graph query, permission-set what-ifs (what_if_assign/revoke_permset)
• 8 new live_* runtime tools (SetupAuditTrail history, security exposure, scheduled jobs, …)
• explain_error / explain_debug_log — paste an error/log, get the component that produced it
• Field-level Flow dataflow lineage, generate-fleet-report, ~24 new component types

Fixed / hardened

• Profile-grant retrieve regression fixed; Profile now co-batched through retrieve splits with an explicit bare-profile disclosure
• canonicalJson crash class, case-variant dangling edges, N+1 query batching, muting permission-set subtraction

Router & protocol

• Trigger-gated de-crowd of the two what_if permission-set tools (+0.5pp top-5 advisory recall, zero losses, live-confirmed)
• MCP protocol: readOnlyHint/openWorldHint annotations, structured output, prompts
• Windows + macOS CI; npm Trusted Publishing (keyless OIDC, no token)

Full release gate green (60/60). Advertised roster = 196 distinct tools (200 registered incl. 4 back-compat aliases). See CHANGELOG.md for the complete [0.2.0] entry.

npm i sf-intelligence