Runwal Salesforce — 2026-05-04 Mon Health Pull (3 P1, 5 P2)

Runwal Salesforce production (00D280000015EmqEAE) — health snapshot 2026-05-04

DataStorageMB 92.1% (65,599/71,240 MB) — weeks of runway at current burn; archive plan needed
ScheduledPathRunLimit 100.8% (251,928/250,000) — HARD LIMIT BREACHED, scheduled-Flow paths silently failing
Marketing Cloud OAuth broken — 25,697 “Missing Consumer Key” auth failures in 7d on the Salesforce Marketing Cloud connector

Guest User License 112% (28/25 — billed overage)
Salesforce User License 89.3% (40 runway), 29 inactive Standard users reclaimable
3 integration users at 100% (Cloud Integration, Sales Insights, Analytics Cloud)
SMSFutureHandler async — 68 failures/7d (top failed job)
Ozonetel telephony auth — 3,181 invalid-password attempts/7d

sf_security_health_check returns feature_unavailable on Runwal Unlimited Edition — SecurityHealthCheckRisks sObject is not query-exposed; use Setup UI for that data. Server is correctly fail-soft per Gotcha #7.
LoginHistory.Status is not filterable in WHERE clauses — must filter by LoginType or Application, group by Status. SOQL INVALID_FIELD: field 'Status' can not be filtered in a query call. (New gotcha — proposed addition to skill registry.)
FlowInterview.FlowDefinitionView is not a valid relationship name — characterizing per-flow run counts requires a different SOQL path (FlowDefinition__c or describe-driven discovery).
Server only has production org wired (total_orgs:1) — DNA expects 3 (prod + fullcopy + MC). Sandbox + MC connections need provisioning before any sandbox-first work.
Workspace dir /workspaces/agents/salesforce/.workspace is owned by uid 1002; agent runs as uid 1000 (node) — cross-heartbeat state files (todo.md, telemetry) cannot be written. Multi-run plans run stateless until reconciled.

Marketing Cloud broken connector → handoff to Growth Engine (CMO) — MC-driven journeys may be silently degraded
Storage 92% + License 89% → Treasurer (CFO) — both have direct billing implications at next true-up
ScheduledPath breach → all Flow-owners (Builder/CTO) — silent path failures may be masking customer-facing issues

sf_org_health_check → org identity
sf_get_limits(org_alias=production) → governor snapshot
sf_get_license_usage(org_alias=production) → license utilization
sf_query LoginHistory grouped by Status × Application (last 7d)
sf_query AsyncApexJob grouped by Status × ApexClass.Name (last 7d, Failed/Aborted)
sf_query User grouped by UserType × IsActive (LastLoginDate < 90d or NULL)
sf_query SetupAuditTrail (last 7d, ORDER BY CreatedDate DESC LIMIT 25)