Reference library

Why Apex throws System.NullPointerException: variables with no default values, tri-state Booleans, null-safe string handling, Map.get() on missing keys, and when a SOQL for loop is better than querying into a list.

How Apex enforces object, field and record access in Summer '26 (API v67.0): the four access layers, what an omitted sharing keyword really does, how sharing keywords interact with USER_MODE, why SECURITY_ENFORCED missed the WHERE clause, and when to use stripInaccessible.

How attackers mass-scanned public Experience Cloud sites through the /s/sfsites/aura endpoint in 2026, the four data access layers for guest users, and Salesforce's recommended hardening steps in priority order, plus what to look for in Event Monitoring.

Pick the right Salesforce integration pattern in four questions. Covers inbound and outbound tools, data virtualization, event-driven options, and how the official Salesforce Integration Patterns guide ranks each solution.

Build reliable batch data synchronization with Salesforce: why SystemModstamp is the safer change marker, how to avoid UNABLE_TO_LOCK_ROW when loading child records, how Bulk API 2.0 processes batches, and ETL practices from the official Integration Patterns guide.

Set up Salesforce Named Credentials and External Credentials for outbound callouts: the seven configuration steps, every authentication protocol and OAuth variant, the permission set step most teams miss, token caching, and callout limits.

Where Salesforce Platform Events and Change Data Capture messages can be lost, what replay actually recovers, RetryableException vs setResumeCheckpoint, replay options -1 and -2, CometD vs Pub/Sub API flow control, and how to design for no data loss.

When to use each Salesforce Composite API resource: subrequest limits, how each one counts against your daily API allocation, rollback behaviour, Composite Graph limits, and why a Composite call can return HTTP 200 after a failure.

Make Salesforce integrations resilient: idempotent upserts, retry with backoff, dead-letter queues, a circuit breaker in Apex, diagnosing REQUEST_LIMIT_EXCEEDED and read timeouts, and safely retiring a legacy Outbound Message integration.

Prevent SOQL injection in Salesforce Apex: why bind variables are the primary defence, where String.escapeSingleQuotes fails, how to use Database.queryWithBinds with user mode, and how to allowlist field names and sort orders.

Architecture patterns for Salesforce orgs with tens of millions of records — data skew and ownership, selective queries and custom indexes, skinny tables, mashup vs replication, archiving with Big Objects, and the design decisions that keep an LDV org fast.

How Salesforce Platform Events actually work — the event bus, publish-after-commit vs immediate, Apex and Flow subscribers, the Pub/Sub API, ReplayId durability, retry with EventBus.RetryableException, and the delivery allocations that bite at scale.

A field-tested approach to Salesforce data migration — object load order, external IDs and upsert, Bulk API 2.0 vs Data Loader, deferred sharing calculation, automation bypass, lock contention, duplicate rules and reconciliation. Built for real cutovers rather than toy datasets.

How Salesforce DevOps Center actually works — work items, pipelines, the change-tracking model that replaces change sets, environment promotion, conflict handling, and where it fits against sf CLI and third-party DevOps tools.

A practical decision guide to asynchronous Apex: when to use Queueable, Batch, @future and Scheduled Apex, the governor limits of each, chaining rules, Transaction Finalizers, and the mistakes that take down production orgs.

A practical guide to Lightning Web Component performance — cacheable Apex and Lightning Data Service, getter and renderedCallback traps, list rendering at scale, debouncing, lazy loading, and how to measure before you optimize.

What actually stays on the profile, what moves to permission sets, and how to migrate a profile-heavy org to the permission-set-led model — with audit SOQL, permission set group design rules and the pitfalls that break user access mid-migration.

How Salesforce Flow actually behaves when an element fails — fault connectors, transaction rollback rules, the Custom Error element, Roll Back Records, retry patterns with platform events, and the monitoring setup every org needs.

A comprehensive guide to writing efficient SOQL queries for large data volumes in Salesforce — covering selective queries, indexes, Skinny Tables, Apex Cursors and Summer '26 updates.

A systematic framework for making Salesforce architecture decisions — covering the build vs configure debate, data model design, performance considerations, and how Summer '26 changes the calculus.

Salesforce integration patterns by direction and timing — REST and SOAP inbound, Apex callouts, Platform Events, Change Data Capture and Hosted MCP Servers — with a decision framework for choosing between them.

A comprehensive technical guide to Agentforce architecture — agent types, custom actions, the Agent Testing Framework, multi-agent orchestration, and the Summer '26 MCP Server and Agentforce Vibe IDE.

Step-by-step setup for connecting Salesforce Hosted MCP Servers to Claude Desktop and Claude Code using a single External Client App. Covers all seven servers, production and sandbox, and bulk CLI commands.

When to use Record-Triggered Flows and when to use Apex triggers in 2026 — covering Summer '26 Flow enhancements, Flow Orchestration now unlimited, and a practical decision framework.

A complete guide to choosing between Scratch Orgs and Sandboxes in your Salesforce DevOps pipeline — covering use cases, the Summer '26 Salesforce Web Console, and a practical environment strategy.

A complete guide to Apex trigger frameworks — why they matter, the most common patterns, a practical implementation, and how to handle recursion, context and bulkification correctly.

A definitive guide to choosing between Lightning Web Components and Aura in 2026 — covering Summer '26 LWC updates including State Management GA, Live Preview GA, and when Aura is still the right choice.

A comprehensive guide to the Salesforce security model — OWDs, profiles, permission sets, sharing rules, field-level security and the Summer '26 API v67.0 security changes that every developer must understand.

Everything you need to know about Salesforce Apex governor limits, current values, the Summer '26 API v67.0 security changes, Apex Cursors, and patterns to write code that never hits the ceiling.

The complete Salesforce object key prefix list — every standard object's three-character prefix, API accessibility status, and an Apex snippet to generate the definitive org-specific list for custom objects.