Org X-Ray — Migration Readiness Report

What your Salesforce org contains — and how much of it converts to code you own. Modeled on the Lightning Experience Readiness Report your admins already know: a scored summary, category findings, and a recommended action plan. Generated by OpenForce from your org’s exported metadata; every number below is counted, not estimated.

Migration Readiness

Overall readiness for an exit onto owned code, scored from your metadata.

23.3% READY TODAY

Significant custom logic

Plan for guided translation — the deterministic core is smaller in this org.

This score is coverage of auto-transcription: the share of inventoried items that convert deterministically today, with no AI in the loop. Validation-rule formulas outside the deterministic subset are counted against it, so the number is honest rather than flattering.

81ready today (deterministic)
144needs translation (LLM + verification)
122needs a person / not in a pipeline yet
518metadata files scanned

Findings — Coverage: what converts today vs what needs translation

Category-by-category, in the Readiness-Report rhythm: what is ready, what needs attention, what is blocked. Each metadata item weighs 1. Validation rules whose formulas fall outside the deterministic subset are counted against today’s coverage — they were flagged by running the actual generator on your rules.

23.3% ready today · 41.5% needs translation · 35.2% needs a person / not in a pipeline yet

Ready today 81 items

Transcribed today — deterministic transcription, running now, no AI in the loop.

ArtifactCount
Objects → PostgreSQL tables (Prisma models)14
Fields → typed columns34
Validation rules → Zod validators (formula subset)0
Record types → per-variant schemas0
List views → table configs + SQL filters1
Search layouts → Postgres full-text indexes2
Permission sets → RBAC policies + row security9
Page layouts → React detail + edit views9
Custom applications → app nav + switcher modules
regenerated from each CustomApplication's ordered tabs by the real app parser — transcribe emits these today
1
Custom Metadata records — seeded as config data
each *.md-meta.xml parsed by the real parser and proven seedable by the real seed generator against the transcribed __mdt objects — transcribe emits data/seed-custom-metadata.ts
11

Needs translation 144 items

Translation required — Apex, Flows and out-of-subset formulas go through the LLM + verification harness.

ArtifactCount
Validation-rule formulas outside the deterministic subset
flagged by the real generator, not estimated
0
Apex classes
17,650 lines, 180 SOQL statements — 158 (87.8%) already translate to SQL deterministically
139
Apex triggers3
Flows
2 elements to translate
1
Workflow rules0
LWC components — template converted, behavior needs a person
render path auto-converted to JSX; @wire / imperative behavior stubbed and marked for a human to finish (see Components section)
1

Needs a person / not in a pipeline yet 122 items

Inventoried but not yet in either automated pipeline — scoped for human work (UI rewrites, endpoint design) or awaiting an engine surface; counted against readiness so the score stays honest.

ArtifactCount
Profiles (permission sets cover the RBAC path today)0
Email templates the classifier can't auto-render0
Reports the SQL generator refuses0
Dashboards not fully rendered0
Integration points (named credentials, connected apps, remote sites)
see Integrations section — endpoints need a human-designed replacement
1
Sharing metadata (roles, sharing rules files)0
Custom UI components — manual rewrite (flagged LWC + all Aura)
no deterministic path — Aura and render-path-blocked LWC need a human rewrite; see Components section
6
Unhandled metadata · .md
Unrecognized metadata type — no pipeline claims it and it is not known to be inert; a person must assess it.
74
Unhandled metadata · .dwl
Unrecognized metadata type — no pipeline claims it and it is not known to be inert; a person must assess it.
14
Unhandled metadata · .dwl-meta.xml
Unrecognized metadata type — no pipeline claims it and it is not known to be inert; a person must assess it.
14
Unhandled metadata · .resource-meta.xml
A Static Resource is a file (image/zip/JS/CSS) served as-is; copied verbatim into the owned app's assets, with no schema or logic to transpile (a bundled JS library is carried over unchanged). (Metadata API catalog classifies StaticResource as "nothing-to-migrate", but that is documented, not generator-proven here — so it is counted against readiness fail-closed until a pipeline verifies it.)
6
Unhandled metadata · .cachepartition-meta.xml
Allocates Salesforce Platform Cache capacity (a runtime performance-tuning construct); the owned stack uses its own caching (Redis/etc.), so there is nothing to migrate. (Metadata API catalog classifies PlatformCachePartition as "nothing-to-migrate", but that is documented, not generator-proven here — so it is counted against readiness fail-closed until a pipeline verifies it.)
1
Unhandled metadata · .docx
Unrecognized metadata type — no pipeline claims it and it is not known to be inert; a person must assess it.
1
Unhandled metadata · .flexipage-meta.xml
Lightning page (flexipage) — the saved config of Salesforce's Lightning App Builder (its drag-and-drop page-layout tool). Each page is parsed and labeled per-page in the Lightning pages section, and its layout semantics (highlights / detail / related lists) are reproduced by the generated record layouts. Layout editing on the owned CRM is answered by an editable layout config: admins edit a served JSON config (field order, sections) that takes effect on refresh with no redeploy, and a drag-and-drop editor can layer on later. Translating this specific page's config into that layout config is a per-page transpile not yet proven per item, so it is counted against readiness. — Apex_Recipes
1
Unhandled metadata · .labels-meta.xml
Custom labels — named display strings (i18n). transcribe already reads them (parseCustomLabels) to resolve @salesforce/label references during component emit, but it does not yet emit them as a standalone i18n message catalog the owned app ships, so they stay counted against readiness until that surface is built (copied as an i18n resource, not transpiled).
1
Unhandled metadata · .permissionsetgroup-meta.xml
Composes several permission sets (with muting) into one grant; the individual permission sets are transcribed to RBAC, but group composition/muting is not yet combined in the RBAC generator — counted against readiness. (Metadata API catalog: PermissionSetGroup.)
1
Unhandled metadata · .prompt-meta.xml
An In-App Guidance prompt/walkthrough (onboarding tooltip) bound to Salesforce's Lightning UI; there is no equivalent overlay surface in the generated app, so there is nothing to migrate. (Metadata API catalog classifies Prompt as "nothing-to-migrate", but that is documented, not generator-proven here — so it is counted against readiness fail-closed until a pipeline verifies it.)
1
Unhandled metadata · .resource
Unrecognized metadata type — no pipeline claims it and it is not known to be inert; a person must assess it.
1

Outside scan scope

Directories in the retrieve that the project’s package scope excluded — counted here for disclosure, not folded into the readiness score.

This org declares a package scope in sfdx-project.json, so the scan looked only inside its packageDirectories. The directories below exist in the retrieve but sit outside that scope — nothing in them is counted in the readiness score above, including any reports, dashboards, or objects they hold. A full migration retrieve should include them if they carry production metadata; re-run the X-Ray against a full retrieve to fold them in.

Directory (unscanned)FilesRecognized metadata inside (count only)
data/15no recognized metadata types
.github/12no recognized metadata types
bin/3no recognized metadata types
.husky/2no recognized metadata types
.vscode/1no recognized metadata types
config/1no recognized metadata types

Nothing to migrate — per-type verdicts

Unrecognized metadata a person would do nothing with — each stated with a defensible reason and excluded from the readiness denominator, so the “needs a person” count reflects real work, not inert files.

4 file(s) across 3 type(s) carry no data model and no logic a CRM replacement must reproduce — localized label translations, binary/static assets, display-only or theming metadata, build/test tooling. Each is excluded from the “needs a person” count and the human-work denominator, with a per-type reason stated so a skeptical reviewer can challenge any single line. Nothing is hidden.

Type / familyFilesWhy there is nothing to migrate
.tab-meta.xml2CustomTab — a navigation container only; app navigation is regenerated from CustomApplication, and a tab carries no data or logic of its own.
.png1PNG image — binary/static asset served as-is by any CRM; nothing to transpile or model.
project/build config1Salesforce project/build config (SFDX / npm / ESLint / Jest / Babel tooling) — dev-time only, not part of the running org; nothing to migrate (discard).

Checked — none found

Surfaces the X-Ray looked for and found zero of in this org — so absence reads as “checked, none found”, not “never looked”.

Surfaces the X-Ray actively looked for in this org and found none of. Listed so a zero reads as “checked, none found” — not “never looked”. Each maps to a real recognizer (an inventory counter or a documented Metadata API type).

Reports · Dashboards · Workflow rules · Approval processes · Email templates · Record types · Connected apps · Remote site settings · Roles · Sharing rules · Queues · Assignment rules · Escalation rules · Auto-response rules · Duplicate rules · Matching rules · Territory management · Forecasting types · Global value sets · Public groups · Quick actions

Recommended action plan

An ordered plan built from what this org actually contains — steps for artifact types you don’t have are omitted.

  1. Review the coverage report
    Confirm the counted inventory above against your org and flag anything the metadata snapshot missed before scoping the conversion. Every number here is counted, not estimated.
  2. Convert schema and declarative logic
    Auto-transcribe 81 items — objects, fields, validation-rule formulas in the deterministic subset, record types, list views, search, permission sets and layouts — into owned code. Deterministic: runs today, no AI in the loop.
  3. Translate and parity-verify Apex and Flows
    Run 139 Apex class(es) and 3 trigger(s) (17,650 lines, 180 SOQL — 158 already deterministic SQL) and 1 Flow(s) (2 elements) through the LLM + verification harness. Each output is checked for behavioral parity against the source — translated, then verified, never trusted blind.
  4. Migrate data and cut over
    Export record data from the 14 object(s), load into PostgreSQL, run both systems in parallel to prove parity, then retire the Salesforce seats. After cutover the per-seat license line item is $0.

Exit bill of materials

What a migration of this org produces and what remains as translation work.

DeliverableQuantity
PostgreSQL tables (Prisma models)14
Typed columns34
Validators (Zod)
0 of 0 formulas need manual/LLM translation
0
Access policies (RBAC + row security)9
Generated views (React detail/edit + list views)19
Full-text search indexes2
Flows to translate
2 elements total
1
Apex classes to translate
17,650 source lines, 180 SOQL statements — 158 → SQL deterministically today
139
Apex triggers to translate3

Cost exposure

Seat count / per-seat cost not provided — the license-exposure comparison is omitted rather than estimated. Re-run the X-Ray with those two numbers to see annual spend vs one-time conversion.

Stay vs. Own — 5-year savings

Provide --seats N --cost PERSEAT_MONTHLY to the X-Ray to model the savings of replacing Salesforce with a stack you own.

Migration plan — the human 30%

UNCALIBRATED — rates pending first real migration. Every hour below is a measured quantity × a named, tunable rate — no invented numbers. The rates are placeholders until the first real migration calibrates them; the arithmetic and the schedule model are fixed.

WorkstreamMan-hoursBasis (quantity × rate)
Apex translation787.1 hCOMPLEX 1,282 code lines × 0.3; STANDARD 1,809 code lines × 0.12; MECHANICAL 989 code lines × 0.05; TRIVIAL 11 code lines × 0 (automated); TEST 68 class(es) × 2 h/class (parity capture + golden fill; UNCALIBRATED)
Component rewrite (LWC/Aura)102 h1 partial × 6 h + 6 flagged × 16 h (0 auto-converted × 0)
Integration re-implementation156 h13 endpoint(s) × 12 h
Unhandled metadata (needs a person)345 h115 item(s) × 3 h
Data-migration dry-runs56 h14 object(s) × 4 h
Build subtotal1,446.1 hsum of workstreams
Code review (15% of build)216.9 hon the build critical path
QA (40% of build)578.5 hparallel stream, 30% lag
Total man-hours (pre-buffer)2,241.5 hbuild + review + QA
Schedule (parallel QA, critical path over 3)Value
Build calendar (build ÷ team)554.3 h
QA calendar (QA ÷ team)192.8 h
QA start lag166.3 h
Critical path = max(build, lag + QA)554.3 h
Calendar (+20% buffer)22.2 weeks ≈ 5.1 months

Budget: $403,470 = 2,689.8 h (incl. 20% buffer) × $150/h.

Every rate used (12 assumptions — challenge any)
  • Apex translation: MECHANICAL 0.05 h/code-line, STANDARD 0.12 h/code-line, COMPLEX 0.3 h/code-line, UNPARSED 0.4 h/code-line (UNCALIBRATED, held ≥ COMPLEX — parser could not establish the file's shape); TRIVIAL 0 (automated — deterministic engine, no human translation).
  • Apex test classes: 2 h per test class (UNCALIBRATED — parity-evidence work: capture the Salesforce deploy/run + hand-fill golden assertions; the parity harness is not yet wired into transcribe, so this is real human work, not an automated 0).
  • Component rewrite: partial 6 h each, flagged 16 h each; converted = 0 h (auto-converted).
  • Integration endpoint: 12 h each.
  • Refused report/dashboard: 2 h each.
  • Needs-pipeline metadata item: 3 h each.
  • Data-migration object dry-run: 4 h each.
  • Code review: 15% of build hours (reviewRatio 0.15), on the build critical path.
  • QA: 40% of build hours (qaRatio 0.4), scheduled in parallel starting after 30% of the build critical path (qaLagPct 0.3).
  • Team size: 3; productive hours per person-week: 30.
  • Contingency buffer: 20% applied last to both hours and calendar (bufferPct 0.2).
  • Blended rate: $150/h.

Integrations

Outbound/inbound integration points this org depends on — counted and mapped where an owned-stack equivalent exists, flagged honestly where it doesn't.

Named credentials, connected apps, remote-site entries, and outbound Apex callouts this org depends on. Endpoint business logic and live credentials are never inspected or fabricated — only counted and mapped where an owned-stack equivalent exists.

KindCount
namedCredential1
apexCallout13

14 integration point(s) total — 1 mapped to an owned-stack equivalent, 13 flagged for human design work.

Custom UI components

LWC/Aura bundles found on disk — LWC run through the real deterministic converter, Aura scoped for manual rewrite.

Custom UI (Lightning Web Components / Aura). LWC templates and the mechanical slice of their JavaScript are converted to a compiling React .tsx by the real deterministic converter (src/translate/lwc-convert.ts) — the same fail-closed posture as the SOQL translator: any construct outside the directive table becomes a NAMED blocker, never a faked translation. Aura is a different framework with no converter and stays 100% manual.

Components found7
LWC / Aura7 / 0
  LWC converted (deterministic .tsx, zero blockers)0
  LWC partial (template converted, behavior needs a person)1
  LWC flagged (render-path blocker — manual rewrite)6
  Aura (manual rewrite — no converter)0

Per-component verdicts (partial / flagged)

ComponentVerdictBlockers (construct + phase)
apexRecipesContainerpartialdepends on unconverted child <RecipeTreeView> (js); depends on unconverted child <RelatedCodeTabs> (js)
errorPanelflaggedimport from c/ldsUtils (js); getter errorMessages not mechanically convertible (js); lifecycle render() (js); JS service module (no template — not a rendered component) (template)
formattedDocsViewerflaggedlightning module import (lightning/platformResourceLoader) (js); @salesforce platform import (@salesforce/resourceUrl/markdownIt) (js); @salesforce platform import (@salesforce/resourceUrl/highlight) (js); @salesforce platform import (@salesforce/resourceUrl/documentation) (js) — +8 more
formattedRecipeDisplayflaggedlightning module import (lightning/platformResourceLoader) (js); @salesforce platform import (@salesforce/resourceUrl/highlight) (js); @salesforce/apex import (FormattedRecipeDisplayController.getRecipeCode) (js); @wire getRecipeCode (js) — +5 more
ldsUtilsflaggedJS service module (no template — not a rendered component) (template)
recipeTreeViewflagged@salesforce/apex import (RecipeTreeViewController.generateTreeData) (js); lifecycle connectedCallback() (js); handler handleTreeItemSelect not mechanically convertible (js); base component <lightning-tree> (template)
relatedCodeTabsflagged@salesforce/apex import (RelatedCodeTabsController.getRelatedClasses) (js); base component <lightning-tabset> (template)

0 of 7 LWC (0.0%) convert to a compiling React .tsx deterministically; 1 convert their template only (behavior stubbed for a person); 6 need a full manual rewrite. All 0 Aura component(s) are 100% manual — a different framework with no converter.

Lightning pages (flexipages)

Record / app / home page composition — a per-page readiness label. Transparency, not coverage: these are already counted in “Needs a person” above.

Lightning pages (flexipages) are a needs-a-person surface — this labeler names, per page, WHY; it does not claim to build them. None of the 1 page(s) are standard-only record pages a generated layout reproduces. Every page here is already counted once against readiness via the .flexipage-meta.xml line in “Needs a person” above — this subsection is transparency only and changes no count.

PageTypeObjectVerdictWhy it needs a person
Apex_RecipesAppPageneeds a person
custom LWC/Aura c:apexRecipesContainer needs rewrite as an owned React component (see Components section).

0 covered (layout semantics) · 1 needs a person · 1 page(s) total.

Apex deep run

Per-class conversion inventory of every Apex file — classified by measured properties, never by a time estimate.

Every *.cls / *.trigger classified by measured properties only — code lines, method count, embedded SOQL, and risk markers (callouts, async, dynamic SOQL) — never by a time estimate. The deterministic verdict is the real pre-pass: TRIVIAL files translate today with no AI in the loop; TEST classes are regenerated as a parity harness, not translated line-for-line.

Apex files142
  classes / triggers / interfaces / enums138 / 3 / 0 / 1
Code lines (of 17,650 total)11,890
Methods (parsed)679
Deterministically translatable files (no LLM)2
Callout / async / @AuraEnabled / test classes13 / 12 / 5 / 68
SOQL — total / deterministic / flagged180 / 158 / 22
DML statements127
Parse failures (method count unknown, flagged)0

Conversion complexity buckets

BucketFilesCode lines
COMPLEX
carries real risk — callouts, async (@future / Queueable / Batchable / Schedulable), dynamic SOQL, or large / high-method.
181,282
STANDARD
ordinary business logic between the mechanical and complex boundaries.
141,809
MECHANICAL
small and bounded — few methods and SOQL, no callouts, async, or dynamic SOQL; a low-branching translation.
40989
TRIVIAL
the deterministic pre-pass translates these today — no LLM, no cost (enums, interfaces, DTOs, constants, empty exceptions).
211
TEST
regenerated as a parity harness, not translated line-for-line.
687,799

Largest classes (by code lines)

ClassKindBucketCode lines
DMLRecipes_TestsclassTEST752
CustomRestEndpointRecipes_TestsclassTEST610
SOQLRecipes_TestsclassTEST436
Safely_TestsclassTEST387
CalloutRecipes_TestsclassTEST370
StripInaccessibleRecipes_TestsclassTEST342
TriggerHandler_TestclassTEST300
EncryptionRecipesclassSTANDARD243
TriggerHandlerclassSTANDARD243
AccountTriggerHandler_TestsclassTEST229

LLM assessment: not run (key-gated per engagement).

Reports & dashboards

What the real report/dashboard generator can translate to SQL/config today vs what it honestly refuses.

Reports translate to a single deterministic SQL SELECT when their shape allows it (Tabular/Summary, implicit-AND filters, no custom summary formulas); Matrix/joined reports and other unsupported shapes are honestly refused, never approximated. Dashboard panels are resolved through the SAME translate/refuse machinery: a panel renders only when it binds exactly to what its backing report produces, and is refused — by construct — whenever the value would have to be fabricated (a renderable chart kind alone is not enough).

Reports0
  auto-translatable to SQL0
  refused (see reasons below)0
Dashboards0
  fully rendered (every panel)0
  panels rendered0
  panels refused (see reasons below)0

Formula & roll-up fields

Computed fields, classified by the owned-stack construct each becomes.

Computed fields, split by the owned-stack construct they become: a same-object formula becomes a Postgres GENERATED ALWAYS AS column; a cross-object formula becomes a query-time resolver (generated columns can't reference another table's row); a roll-up summary becomes a trigger-maintained aggregate. Anything outside that subset is flagged, never guessed.

Generated columns (same-object formulas)0
Rollup triggers (roll-up summaries)0
Query-time resolvers (cross-object formulas)0
Flagged (outside the supported subset)0

0 computed field(s) classified total.

Sharing model

Org-wide defaults, role hierarchy, and sharing rules — parsed and counted, not compiled into RLS here.

Org-wide defaults, role hierarchy, and sharing rules — parsed only, not compiled into RLS policies here (that step needs a real owner-column wiring the engine doesn't have yet; see the transcription CLI's Sharing→RLS output for that artifact). Default-deny: anything not modeled below grants nothing.

Objects with OWD modeled14
Roles0
Role hierarchy depth0
Sharing rules modeled0
Constructs flagged / not modeled9

OWD mix

Org-wide defaultObjects
ReadWrite4
Private8
ControlledByParent2

Flagged count always includes a standing advisory for Manual sharing: it is per-record runtime data with no metadata file to parse, so it can never be transcribed from a snapshot alone.

Appendix · Inventory

Everything found in the metadata snapshot, by type — the raw counts behind the readiness score above.

MetadataCount
Objects14
Fields34
Validation rules0
Record types0
List views1
Search layouts2
Permission sets9
Page layouts9
Profiles0
Flows1 (2 elements)
Apex classes139
Apex triggers3
Apex source lines17,650
SOQL statements (measured)180
SOQL translating deterministically today158 (87.8%)
Workflow rules0
Email templates0
Reports0
Other: .cachepartition-meta.xml1
Other: .csptrustedsite-meta.xml1
Other: .css1
Other: .docx1
Other: .dwl14
Other: .dwl-meta.xml14
Other: .flexipage-meta.xml1
Other: .js2
Other: .json1
Other: .labels-meta.xml1
Other: .md74
Other: .permissionsetgroup-meta.xml1
Other: .png1
Other: .prompt-meta.xml1
Other: .resource1
Other: .resource-meta.xml6
Other: .tab-meta.xml2
Total files scanned518

Flow element histogram

ElementCount
recordLookups1
start1